CVE-2025-20200

Root privilege escalation via crafted configuration commands

Published May 7, 2025 · Updated Feb 26, 2026

Privilege escalation in the CLI of Cisco IOS XE Software allows local users to gain root access through crafted configuration commands. The CLI insufficiently validates crafted input while processing specific configuration commands, permitting access to the underlying OS as root. Exploitation requires privilege level 15 access to configuration mode; successful exploitation permits potentially undetected actions on the device.

CVSS severity6.7
Medium
EPSS probability0.17%
Next 30 days · Sep 16, 2026
Known exploitationUnconfirmed
Based on sourced intelligence
Hinoki checkNot available
Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

Privilege escalation in the CLI of Cisco IOS XE Software allows local users to gain root access through crafted configuration commands. The CLI insufficiently validates crafted input while processing specific configuration commands, permitting access to the underlying OS as root. Exploitation requires privilege level 15 access to configuration mode; successful exploitation permits potentially undetected actions on the device.

The record

CVE
CVE-2025-20200
Published
May 7, 2025
Updated
Feb 26, 2026
Vendor
ClamAV
Product
Cisco IOS XE Software
Classifications
CWE-754, T1068
Attack vector
local
Privileges
admin

Timeline

How it unfolded

  1. May 7, 2025CVE publishedPublication date reported by the CVE source.
  2. Feb 26, 2026Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

  1. Affected versionversion=16.10.1
  2. Affected versionversion=16.10.1a
  3. Affected versionversion=16.10.1b
  4. Affected versionversion=16.10.1c
  5. Affected versionversion=16.10.1d
  6. Affected versionversion=16.10.1e
  7. Affected versionversion=16.10.1f
  8. Affected versionversion=16.10.1g
  9. Affected versionversion=16.10.1s
  10. Affected versionversion=16.10.2
  11. Affected versionversion=16.10.3
  12. Affected versionversion=16.1.1
  13. Affected versionversion=16.11.1
  14. Affected versionversion=16.11.1a
  15. Affected versionversion=16.11.1b
  16. Affected versionversion=16.11.1s
  17. Affected versionversion=16.11.2
  18. Affected versionversion=16.1.2
  19. Affected versionversion=16.12.1
  20. Affected versionversion=16.12.10
  21. Affected versionversion=16.12.10a
  22. Affected versionversion=16.12.11
  23. Affected versionversion=16.12.12
  24. Affected versionversion=16.12.1a
  25. Affected versionversion=16.12.1c
  26. Affected versionversion=16.12.1s
  27. Affected versionversion=16.12.1t
  28. Affected versionversion=16.12.1w
  29. Affected versionversion=16.12.1x
  30. Affected versionversion=16.12.1y
  31. Affected versionversion=16.12.1z1
  32. Affected versionversion=16.12.1z2
  33. Affected versionversion=16.12.2
  34. Affected versionversion=16.12.2a
  35. Affected versionversion=16.12.2s
  36. Affected versionversion=16.12.3
  37. Affected versionversion=16.12.3a
  38. Affected versionversion=16.12.3s
  39. Affected versionversion=16.12.4
  40. Affected versionversion=16.12.4a
  41. Affected versionversion=16.12.5
  42. Affected versionversion=16.12.5a
  43. Affected versionversion=16.12.5b
  44. Affected versionversion=16.12.6
  45. Affected versionversion=16.12.6a
  46. Affected versionversion=16.12.7
  47. Affected versionversion=16.12.8
  48. Affected versionversion=16.12.9
  49. Affected versionversion=16.1.3
  50. Affected versionversion=16.2.1
  51. Affected versionversion=16.2.2
  52. Affected versionversion=16.3.1
  53. Affected versionversion=16.3.10
  54. Affected versionversion=16.3.11
  55. Affected versionversion=16.3.1a
  56. Affected versionversion=16.3.2
  57. Affected versionversion=16.3.3
  58. Affected versionversion=16.3.4
  59. Affected versionversion=16.3.5
  60. Affected versionversion=16.3.5b
  61. Affected versionversion=16.3.6
  62. Affected versionversion=16.3.7
  63. Affected versionversion=16.3.8
  64. Affected versionversion=16.3.9
  65. Affected versionversion=16.4.1
  66. Affected versionversion=16.4.2
  67. Affected versionversion=16.4.3
  68. Affected versionversion=16.5.1
  69. Affected versionversion=16.5.1a
  70. Affected versionversion=16.5.1b
  71. Affected versionversion=16.5.2
  72. Affected versionversion=16.5.3
  73. Affected versionversion=16.6.1
  74. Affected versionversion=16.6.10
  75. Affected versionversion=16.6.2
  76. Affected versionversion=16.6.3
  77. Affected versionversion=16.6.4
  78. Affected versionversion=16.6.4a
  79. Affected versionversion=16.6.5
  80. Affected versionversion=16.6.5a
  81. Affected versionversion=16.6.6
  82. Affected versionversion=16.6.7
  83. Affected versionversion=16.6.8
  84. Affected versionversion=16.6.9
  85. Affected versionversion=16.7.1
  86. Affected versionversion=16.7.1a
  87. Affected versionversion=16.7.1b
  88. Affected versionversion=16.7.2
  89. Affected versionversion=16.7.3
  90. Affected versionversion=16.7.4
  91. Affected versionversion=16.8.1
  92. Affected versionversion=16.8.1a
  93. Affected versionversion=16.8.1b
  94. Affected versionversion=16.8.1c
  95. Affected versionversion=16.8.1d
  96. Affected versionversion=16.8.1e
  97. Affected versionversion=16.8.1s
  98. Affected versionversion=16.8.2
  99. Affected versionversion=16.8.3
  100. Affected versionversion=16.9.1
  101. Affected versionversion=16.9.1a
  102. Affected versionversion=16.9.1b
  103. Affected versionversion=16.9.1s
  104. Affected versionversion=16.9.2
  105. Affected versionversion=16.9.3
  106. Affected versionversion=16.9.3a
  107. Affected versionversion=16.9.4
  108. Affected versionversion=16.9.5
  109. Affected versionversion=16.9.5f
  110. Affected versionversion=16.9.6
  111. Affected versionversion=16.9.7
  112. Affected versionversion=16.9.8
  113. Affected versionversion=17.10.1
  114. Affected versionversion=17.10.1a
  115. Affected versionversion=17.10.1b
  116. Affected versionversion=17.1.1
  117. Affected versionversion=17.11.1
  118. Affected versionversion=17.11.1a
  119. Affected versionversion=17.11.99SW
  120. Affected versionversion=17.1.1a
  121. Affected versionversion=17.1.1s
  122. Affected versionversion=17.1.1t
  123. Affected versionversion=17.12.1
  124. Affected versionversion=17.12.1a
  125. Affected versionversion=17.12.1w
  126. Affected versionversion=17.12.1x
  127. Affected versionversion=17.12.1y
  128. Affected versionversion=17.12.1z
  129. Affected versionversion=17.12.1z1
  130. Affected versionversion=17.12.2
  131. Affected versionversion=17.12.2a
  132. Affected versionversion=17.12.3
  133. Affected versionversion=17.12.3a
  134. Affected versionversion=17.12.4
  135. Affected versionversion=17.12.4a
  136. Affected versionversion=17.12.4b
  137. Affected versionversion=17.1.3
  138. Affected versionversion=17.13.1
  139. Affected versionversion=17.13.1a
  140. Affected versionversion=17.14.1
  141. Affected versionversion=17.14.1a
  142. Affected versionversion=17.15.1
  143. Affected versionversion=17.15.1a
  144. Affected versionversion=17.15.1b
  145. Affected versionversion=17.15.1w
  146. Affected versionversion=17.2.1
  147. Affected versionversion=17.2.1a
  148. Affected versionversion=17.2.1r
  149. Affected versionversion=17.2.1v
  150. Affected versionversion=17.2.2
  151. Affected versionversion=17.2.3
  152. Affected versionversion=17.3.1
  153. Affected versionversion=17.3.1a
  154. Affected versionversion=17.3.1w
  155. Affected versionversion=17.3.1x
  156. Affected versionversion=17.3.1z
  157. Affected versionversion=17.3.2
  158. Affected versionversion=17.3.2a
  159. Affected versionversion=17.3.3
  160. Affected versionversion=17.3.4
  161. Affected versionversion=17.3.4a
  162. Affected versionversion=17.3.4b
  163. Affected versionversion=17.3.4c
  164. Affected versionversion=17.3.5
  165. Affected versionversion=17.3.5a
  166. Affected versionversion=17.3.5b
  167. Affected versionversion=17.3.6
  168. Affected versionversion=17.3.7
  169. Affected versionversion=17.3.8
  170. Affected versionversion=17.3.8a
  171. Affected versionversion=17.4.1
  172. Affected versionversion=17.4.1a
  173. Affected versionversion=17.4.1b
  174. Affected versionversion=17.4.2
  175. Affected versionversion=17.4.2a
  176. Affected versionversion=17.5.1
  177. Affected versionversion=17.5.1a
  178. Affected versionversion=17.6.1
  179. Affected versionversion=17.6.1a
  180. Affected versionversion=17.6.1w
  181. Affected versionversion=17.6.1x
  182. Affected versionversion=17.6.1y
  183. Affected versionversion=17.6.1z
  184. Affected versionversion=17.6.1z1
  185. Affected versionversion=17.6.2
  186. Affected versionversion=17.6.3
  187. Affected versionversion=17.6.3a
  188. Affected versionversion=17.6.4
  189. Affected versionversion=17.6.5
  190. Affected versionversion=17.6.5a
  191. Affected versionversion=17.6.6
  192. Affected versionversion=17.6.6a
  193. Affected versionversion=17.6.7
  194. Affected versionversion=17.6.8
  195. Affected versionversion=17.6.8a
  196. Affected versionversion=17.7.1
  197. Affected versionversion=17.7.1a
  198. Affected versionversion=17.7.1b
  199. Affected versionversion=17.7.2
  200. Affected versionversion=17.8.1
  201. Affected versionversion=17.8.1a
  202. Affected versionversion=17.9.1
  203. Affected versionversion=17.9.1a
  204. Affected versionversion=17.9.1w
  205. Affected versionversion=17.9.1x
  206. Affected versionversion=17.9.1x1
  207. Affected versionversion=17.9.1y
  208. Affected versionversion=17.9.1y1
  209. Affected versionversion=17.9.2
  210. Affected versionversion=17.9.2a
  211. Affected versionversion=17.9.3
  212. Affected versionversion=17.9.3a
  213. Affected versionversion=17.9.4
  214. Affected versionversion=17.9.4a
  215. Affected versionversion=17.9.5
  216. Affected versionversion=17.9.5a
  217. Affected versionversion=17.9.5b
  218. Affected versionversion=17.9.5e
  219. Affected versionversion=17.9.5f
  220. Affected versionversion=17.9.6
  221. Affected versionversion=17.9.6a
  222. Affected versionversion=3.10.0cE
  223. Affected versionversion=3.10.0E
  224. Affected versionversion=3.10.1E
  225. Affected versionversion=3.10.2E
  226. Affected versionversion=3.10.3E
  227. Affected versionversion=3.11.0E
  228. Affected versionversion=3.11.0S
  229. Affected versionversion=3.11.10E
  230. Affected versionversion=3.11.11E
  231. Affected versionversion=3.11.1aE
  232. Affected versionversion=3.11.1E
  233. Affected versionversion=3.11.1S
  234. Affected versionversion=3.11.2E
  235. Affected versionversion=3.11.2S
  236. Affected versionversion=3.11.3aE
  237. Affected versionversion=3.11.3E
  238. Affected versionversion=3.11.3S
  239. Affected versionversion=3.11.4E
  240. Affected versionversion=3.11.4S
  241. Affected versionversion=3.11.5E
  242. Affected versionversion=3.11.6E
  243. Affected versionversion=3.11.7E
  244. Affected versionversion=3.11.8E
  245. Affected versionversion=3.11.9E
  246. Affected versionversion=3.12.0aS
  247. Affected versionversion=3.12.0S
  248. Affected versionversion=3.12.1S
  249. Affected versionversion=3.12.2S
  250. Affected versionversion=3.12.3S
  251. Affected versionversion=3.12.4S
  252. Affected versionversion=3.13.0aS
  253. Affected versionversion=3.13.0S
  254. Affected versionversion=3.13.10S
  255. Affected versionversion=3.13.1S
  256. Affected versionversion=3.13.2aS
  257. Affected versionversion=3.13.2S
  258. Affected versionversion=3.13.3S
  259. Affected versionversion=3.13.4S
  260. Affected versionversion=3.13.5aS
  261. Affected versionversion=3.13.5S
  262. Affected versionversion=3.13.6aS
  263. Affected versionversion=3.13.6S
  264. Affected versionversion=3.13.7aS
  265. Affected versionversion=3.13.7S
  266. Affected versionversion=3.13.8S
  267. Affected versionversion=3.13.9S
  268. Affected versionversion=3.14.0S
  269. Affected versionversion=3.14.1S
  270. Affected versionversion=3.14.2S
  271. Affected versionversion=3.14.3S
  272. Affected versionversion=3.14.4S
  273. Affected versionversion=3.15.0S
  274. Affected versionversion=3.15.1cS
  275. Affected versionversion=3.15.1S
  276. Affected versionversion=3.15.2S
  277. Affected versionversion=3.15.3S
  278. Affected versionversion=3.15.4S
  279. Affected versionversion=3.16.0cS
  280. Affected versionversion=3.16.0S
  281. Affected versionversion=3.16.10S
  282. Affected versionversion=3.16.1aS
  283. Affected versionversion=3.16.1S
  284. Affected versionversion=3.16.2aS
  285. Affected versionversion=3.16.2bS
  286. Affected versionversion=3.16.2S
  287. Affected versionversion=3.16.3aS
  288. Affected versionversion=3.16.3S
  289. Affected versionversion=3.16.4aS
  290. Affected versionversion=3.16.4bS
  291. Affected versionversion=3.16.4dS
  292. Affected versionversion=3.16.4S
  293. Affected versionversion=3.16.5S
  294. Affected versionversion=3.16.6bS
  295. Affected versionversion=3.16.6S
  296. Affected versionversion=3.16.7aS
  297. Affected versionversion=3.16.7bS
  298. Affected versionversion=3.16.7S
  299. Affected versionversion=3.16.8S
  300. Affected versionversion=3.16.9S
  301. Affected versionversion=3.17.0S
  302. Affected versionversion=3.17.1aS
  303. Affected versionversion=3.17.1S
  304. Affected versionversion=3.17.2S
  305. Affected versionversion=3.17.3S
  306. Affected versionversion=3.17.4S
  307. Affected versionversion=3.18.0aS
  308. Affected versionversion=3.18.0S
  309. Affected versionversion=3.18.0SP
  310. Affected versionversion=3.18.1aSP
  311. Affected versionversion=3.18.1bSP
  312. Affected versionversion=3.18.1cSP
  313. Affected versionversion=3.18.1S
  314. Affected versionversion=3.18.1SP
  315. Affected versionversion=3.18.2aSP
  316. Affected versionversion=3.18.2S
  317. Affected versionversion=3.18.2SP
  318. Affected versionversion=3.18.3aSP
  319. Affected versionversion=3.18.3bSP
  320. Affected versionversion=3.18.3S
  321. Affected versionversion=3.18.3SP
  322. Affected versionversion=3.18.4S
  323. Affected versionversion=3.18.4SP
  324. Affected versionversion=3.18.5SP
  325. Affected versionversion=3.18.6SP
  326. Affected versionversion=3.18.7SP
  327. Affected versionversion=3.18.8aSP
  328. Affected versionversion=3.18.9SP
  329. Affected versionversion=3.2.0SE
  330. Affected versionversion=3.2.1SE
  331. Affected versionversion=3.2.2SE
  332. Affected versionversion=3.2.3SE
  333. Affected versionversion=3.3.0SE
  334. Affected versionversion=3.3.0SG
  335. Affected versionversion=3.3.1SE
  336. Affected versionversion=3.3.1SG
  337. Affected versionversion=3.3.2SE
  338. Affected versionversion=3.3.2SG
  339. Affected versionversion=3.3.3SE
  340. Affected versionversion=3.3.4SE
  341. Affected versionversion=3.3.5SE
  342. Affected versionversion=3.4.0SG
  343. Affected versionversion=3.4.1SG
  344. Affected versionversion=3.4.2SG
  345. Affected versionversion=3.4.3SG
  346. Affected versionversion=3.4.4SG
  347. Affected versionversion=3.4.5SG
  348. Affected versionversion=3.4.6SG
  349. Affected versionversion=3.4.7SG
  350. Affected versionversion=3.4.8SG
  351. Affected versionversion=3.5.0E
  352. Affected versionversion=3.5.1E
  353. Affected versionversion=3.5.2E
  354. Affected versionversion=3.5.3E
  355. Affected versionversion=3.6.0E
  356. Affected versionversion=3.6.10E
  357. Affected versionversion=3.6.1E
  358. Affected versionversion=3.6.2aE
  359. Affected versionversion=3.6.2E
  360. Affected versionversion=3.6.3E
  361. Affected versionversion=3.6.4E
  362. Affected versionversion=3.6.5aE
  363. Affected versionversion=3.6.5bE
  364. Affected versionversion=3.6.5E
  365. Affected versionversion=3.6.6E
  366. Affected versionversion=3.6.7bE
  367. Affected versionversion=3.6.7E
  368. Affected versionversion=3.6.8E
  369. Affected versionversion=3.6.9E
  370. Affected versionversion=3.7.0bS
  371. Affected versionversion=3.7.0E
  372. Affected versionversion=3.7.0S
  373. Affected versionversion=3.7.1aS
  374. Affected versionversion=3.7.1E
  375. Affected versionversion=3.7.1S
  376. Affected versionversion=3.7.2E
  377. Affected versionversion=3.7.2S
  378. Affected versionversion=3.7.2tS
  379. Affected versionversion=3.7.3E
  380. Affected versionversion=3.7.3S
  381. Affected versionversion=3.7.4aS
  382. Affected versionversion=3.7.4E
  383. Affected versionversion=3.7.4S
  384. Affected versionversion=3.7.5E
  385. Affected versionversion=3.7.5S
  386. Affected versionversion=3.7.6S
  387. Affected versionversion=3.7.7S
  388. Affected versionversion=3.8.0E
  389. Affected versionversion=3.8.0S
  390. Affected versionversion=3.8.10E
  391. Affected versionversion=3.8.1E
  392. Affected versionversion=3.8.1S
  393. Affected versionversion=3.8.2E
  394. Affected versionversion=3.8.2S
  395. Affected versionversion=3.8.3E
  396. Affected versionversion=3.8.4E
  397. Affected versionversion=3.8.5aE
  398. Affected versionversion=3.8.5E
  399. Affected versionversion=3.8.6E
  400. Affected versionversion=3.8.7E
  401. Affected versionversion=3.8.8E
  402. Affected versionversion=3.8.9E
  403. Affected versionversion=3.9.0aS
  404. Affected versionversion=3.9.0E
  405. Affected versionversion=3.9.0S
  406. Affected versionversion=3.9.1aS
  407. Affected versionversion=3.9.1E
  408. Affected versionversion=3.9.1S
  409. Affected versionversion=3.9.2E
  410. Affected versionversion=3.9.2S

What conditions does exploitation require?

Attack vectorlocal
Required privilegesadmin

What is affected?

ClamAV · Cisco IOS XE Softwareversion=16.10.1; version=16.10.1a; version=16.10.1b; version=16.10.1c; version=16.10.1d; version=16.10.1e; version=16.10.1f; version=16.10.1g; version=16.10.1s; version=16.10.2; version=16.10.3; version=16.1.1; version=16.11.1; version=16.11.1a; version=16.11.1b; version=16.11.1s; version=16.11.2; version=16.1.2; version=16.12.1; version=16.12.10; version=16.12.10a; version=16.12.11; version=16.12.12; version=16.12.1a; version=16.12.1c; version=16.12.1s; version=16.12.1t; version=16.12.1w; version=16.12.1x; version=16.12.1y; version=16.12.1z1; version=16.12.1z2; version=16.12.2; version=16.12.2a; version=16.12.2s; version=16.12.3; version=16.12.3a; version=16.12.3s; version=16.12.4; version=16.12.4a; version=16.12.5; version=16.12.5a; version=16.12.5b; version=16.12.6; version=16.12.6a; version=16.12.7; version=16.12.8; version=16.12.9; version=16.1.3; version=16.2.1; version=16.2.2; version=16.3.1; version=16.3.10; version=16.3.11; version=16.3.1a; version=16.3.2; version=16.3.3; version=16.3.4; version=16.3.5; version=16.3.5b; version=16.3.6; version=16.3.7; version=16.3.8; version=16.3.9; version=16.4.1; version=16.4.2; version=16.4.3; version=16.5.1; version=16.5.1a; version=16.5.1b; version=16.5.2; version=16.5.3; version=16.6.1; version=16.6.10; version=16.6.2; version=16.6.3; version=16.6.4; version=16.6.4a; version=16.6.5; version=16.6.5a; version=16.6.6; version=16.6.7; version=16.6.8; version=16.6.9; version=16.7.1; version=16.7.1a; version=16.7.1b; version=16.7.2; version=16.7.3; version=16.7.4; version=16.8.1; version=16.8.1a; version=16.8.1b; version=16.8.1c; version=16.8.1d; version=16.8.1e; version=16.8.1s; version=16.8.2; version=16.8.3; version=16.9.1; version=16.9.1a; version=16.9.1b; version=16.9.1s; version=16.9.2; version=16.9.3; version=16.9.3a; version=16.9.4; version=16.9.5; version=16.9.5f; version=16.9.6; version=16.9.7; version=16.9.8; version=17.10.1; version=17.10.1a; version=17.10.1b; version=17.1.1; version=17.11.1; version=17.11.1a; version=17.11.99SW; version=17.1.1a; version=17.1.1s; version=17.1.1t; version=17.12.1; version=17.12.1a; version=17.12.1w; version=17.12.1x; version=17.12.1y; version=17.12.1z; version=17.12.1z1; version=17.12.2; version=17.12.2a; version=17.12.3; version=17.12.3a; version=17.12.4; version=17.12.4a; version=17.12.4b; version=17.1.3; version=17.13.1; version=17.13.1a; version=17.14.1; version=17.14.1a; version=17.15.1; version=17.15.1a; version=17.15.1b; version=17.15.1w; version=17.2.1; version=17.2.1a; version=17.2.1r; version=17.2.1v; version=17.2.2; version=17.2.3; version=17.3.1; version=17.3.1a; version=17.3.1w; version=17.3.1x; version=17.3.1z; version=17.3.2; version=17.3.2a; version=17.3.3; version=17.3.4; version=17.3.4a; version=17.3.4b; version=17.3.4c; version=17.3.5; version=17.3.5a; version=17.3.5b; version=17.3.6; version=17.3.7; version=17.3.8; version=17.3.8a; version=17.4.1; version=17.4.1a; version=17.4.1b; version=17.4.2; version=17.4.2a; version=17.5.1; version=17.5.1a; version=17.6.1; version=17.6.1a; version=17.6.1w; version=17.6.1x; version=17.6.1y; version=17.6.1z; version=17.6.1z1; version=17.6.2; version=17.6.3; version=17.6.3a; version=17.6.4; version=17.6.5; version=17.6.5a; version=17.6.6; version=17.6.6a; version=17.6.7; version=17.6.8; version=17.6.8a; version=17.7.1; version=17.7.1a; version=17.7.1b; version=17.7.2; version=17.8.1; version=17.8.1a; version=17.9.1; version=17.9.1a; version=17.9.1w; version=17.9.1x; version=17.9.1x1; version=17.9.1y; version=17.9.1y1; version=17.9.2; version=17.9.2a; version=17.9.3; version=17.9.3a; version=17.9.4; version=17.9.4a; version=17.9.5; version=17.9.5a; version=17.9.5b; version=17.9.5e; version=17.9.5f; version=17.9.6; version=17.9.6a; version=3.10.0cE; version=3.10.0E; version=3.10.1E; version=3.10.2E; version=3.10.3E; version=3.11.0E; version=3.11.0S; version=3.11.10E; version=3.11.11E; version=3.11.1aE; version=3.11.1E; version=3.11.1S; version=3.11.2E; version=3.11.2S; version=3.11.3aE; version=3.11.3E; version=3.11.3S; version=3.11.4E; version=3.11.4S; version=3.11.5E; version=3.11.6E; version=3.11.7E; version=3.11.8E; version=3.11.9E; version=3.12.0aS; version=3.12.0S; version=3.12.1S; version=3.12.2S; version=3.12.3S; version=3.12.4S; version=3.13.0aS; version=3.13.0S; version=3.13.10S; version=3.13.1S; version=3.13.2aS; version=3.13.2S; version=3.13.3S; version=3.13.4S; version=3.13.5aS; version=3.13.5S; version=3.13.6aS; version=3.13.6S; version=3.13.7aS; version=3.13.7S; version=3.13.8S; version=3.13.9S; version=3.14.0S; version=3.14.1S; version=3.14.2S; version=3.14.3S; version=3.14.4S; version=3.15.0S; version=3.15.1cS; version=3.15.1S; version=3.15.2S; version=3.15.3S; version=3.15.4S; version=3.16.0cS; version=3.16.0S; version=3.16.10S; version=3.16.1aS; version=3.16.1S; version=3.16.2aS; version=3.16.2bS; version=3.16.2S; version=3.16.3aS; version=3.16.3S; version=3.16.4aS; version=3.16.4bS; version=3.16.4dS; version=3.16.4S; version=3.16.5S; version=3.16.6bS; version=3.16.6S; version=3.16.7aS; version=3.16.7bS; version=3.16.7S; version=3.16.8S; version=3.16.9S; version=3.17.0S; version=3.17.1aS; version=3.17.1S; version=3.17.2S; version=3.17.3S; version=3.17.4S; version=3.18.0aS; version=3.18.0S; version=3.18.0SP; version=3.18.1aSP; version=3.18.1bSP; version=3.18.1cSP; version=3.18.1S; version=3.18.1SP; version=3.18.2aSP; version=3.18.2S; version=3.18.2SP; version=3.18.3aSP; version=3.18.3bSP; version=3.18.3S; version=3.18.3SP; version=3.18.4S; version=3.18.4SP; version=3.18.5SP; version=3.18.6SP; version=3.18.7SP; version=3.18.8aSP; version=3.18.9SP; version=3.2.0SE; version=3.2.1SE; version=3.2.2SE; version=3.2.3SE; version=3.3.0SE; version=3.3.0SG; version=3.3.1SE; version=3.3.1SG; version=3.3.2SE; version=3.3.2SG; version=3.3.3SE; version=3.3.4SE; version=3.3.5SE; version=3.4.0SG; version=3.4.1SG; version=3.4.2SG; version=3.4.3SG; version=3.4.4SG; version=3.4.5SG; version=3.4.6SG; version=3.4.7SG; version=3.4.8SG; version=3.5.0E; version=3.5.1E; version=3.5.2E; version=3.5.3E; version=3.6.0E; version=3.6.10E; version=3.6.1E; version=3.6.2aE; version=3.6.2E; version=3.6.3E; version=3.6.4E; version=3.6.5aE; version=3.6.5bE; version=3.6.5E; version=3.6.6E; version=3.6.7bE; version=3.6.7E; version=3.6.8E; version=3.6.9E; version=3.7.0bS; version=3.7.0E; version=3.7.0S; version=3.7.1aS; version=3.7.1E; version=3.7.1S; version=3.7.2E; version=3.7.2S; version=3.7.2tS; version=3.7.3E; version=3.7.3S; version=3.7.4aS; version=3.7.4E; version=3.7.4S; version=3.7.5E; version=3.7.5S; version=3.7.6S; version=3.7.7S; version=3.8.0E; version=3.8.0S; version=3.8.10E; version=3.8.1E; version=3.8.1S; version=3.8.2E; version=3.8.2S; version=3.8.3E; version=3.8.4E; version=3.8.5aE; version=3.8.5E; version=3.8.6E; version=3.8.7E; version=3.8.8E; version=3.8.9E; version=3.9.0aS; version=3.9.0E; version=3.9.0S; version=3.9.1aS; version=3.9.1E; version=3.9.1S; version=3.9.2E; version=3.9.2S

Published CVSS scores

8.2NIST NVDCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
6.7Cisco Systems, Inc.CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N/E:X/RL:X/RC:X

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026
Latest reporting daySep 16, 2026
Latest daily unique IPsUnavailable
Prior 30-day averageUnavailable
SourceShadowserver honeypots (KEV)
Vectorlocal
Privilegesadmin
Known exploitationUnconfirmed
Public exploitUnconfirmed

Weakness, pattern, technique

CWE-754Improper Check for Unusual or Exceptional Conditions
T1068Exploitation for Privilege Escalation

Public exploit references

No public exploit references are available in this record.

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo