© 2026 vulntracker.io

CVE-2025-20119

Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability

MEDIUM

5.7

CVSS Score

Published: February 26, 2025 at 04:23 PM UTC

Updated: June 17, 2026 at 08:40 AM UTC

1 product affected across 1 vendorApplication Policy Infrastructure Controller

Using Cisco Application Policy Infrastructure Controller (APIC) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Application Policy Infrastructure Controller (APIC) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.7

Exploit prediction

EPSS 0.1%

SSVC

No known exploit

Description

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Application Policy Infrastructure Controller · Cisco

95%

3.2(10e)3.2(10f)3.2(10g)3.2(1l)3.2(1m)3.2(2l)3.2(2o)3.2(3i)3.2(3j)3.2(3n)3.2(3o)3.2(3r)3.2(3s)3.2(41d)3.2(4d)3.2(4e)3.2(5d)3.2(5e)3.2(5f)3.2(6i)3.2(7f)3.2(7k)3.2(8d)3.2(9b)3.2(9f)3.2(9h)4.0(1h)4.0(2c)4.0(3c)4.0(3d)4.1(1a)4.1(1i)4.1(1j)4.1(1k)4.1(1l)4.1(2g)4.1(2m)4.1(2o)4.1(2s)4.1(2u)4.1(2w)4.1(2x)4.2(1g)4.2(1i)4.2(1j)4.2(1l)4.2(2e)4.2(2f)4.2(2g)4.2(3j)4.2(3l)4.2(3n)4.2(3q)4.2(4i)4.2(4k)4.2(4o)4.2(4p)4.2(5k)4.2(5l)4.2(5n)4.2(6d)4.2(6g)4.2(6h)4.2(6l)4.2(6o)4.2(7f)4.2(7l)4.2(7q)4.2(7r)4.2(7s)4.2(7t)4.2(7u)4.2(7v)4.2(7w)5.0(1k)5.0(1l)5.0(2e)5.0(2h)5.1(1h)5.1(2e)5.1(3e)5.1(4c)5.2(1g)5.2(2e)5.2(2f)5.2(2g)5.2(2h)5.2(3e)5.2(3f)5.2(3g)5.2(4d)5.2(4e)5.2(4f)5.2(4h)5.2(5c)5.2(5d)5.2(5e)5.2(6e)5.2(6g)5.2(6h)5.2(7f)5.2(7g)5.2(8d)5.2(8e)5.2(8f)5.2(8g)5.2(8h)5.2(8i)5.3(1d)5.3(2a)5.3(2b)5.3(2c)5.3(2d)5.3(2e)6.0(1g)6.0(1j)6.0(2h)6.0(2j)6.0(3d)6.0(3e)6.0(3g)6.0(4c)6.0(5h)6.0(5j)6.0(6c)6.0(7e)6.0(8d)6.1(1f)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5

References (1)

Vendor Advisory

Source: [email protected]

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.7MEDIUM[email protected]

Attack Vector: LOCAL
Complexity: HIGH
Privileges: HIGH
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusANALYZED

CWE

CWE-362

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card