CVE-2025-20119

Published: Feb 26, 2025Modified: Jul 31, 2025

5.7

Vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H

Exploitability: 0.5 / Impact: 5.2

Source: NVD

Description

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.

Affected (128)

Products: Cisco: Application Policy Infrastructure Controller

Cisco

1 product

Application Policy Infrastructure Controller

Configuration A

128 vulnerable

Vulnerable Software	Affected Versions
Cisco Application Policy Infrastructure Controller	Version 3.2(10e)
Cisco Application Policy Infrastructure Controller	Version 3.2(10f)
Cisco Application Policy Infrastructure Controller	Version 3.2(10g)
Cisco Application Policy Infrastructure Controller	Version 3.2(1l)
Cisco Application Policy Infrastructure Controller	Version 3.2(1m)
Cisco Application Policy Infrastructure Controller	Version 3.2(2l)
Cisco Application Policy Infrastructure Controller	Version 3.2(2o)
Cisco Application Policy Infrastructure Controller	Version 3.2(3i)
Cisco Application Policy Infrastructure Controller	Version 3.2(3j)
Cisco Application Policy Infrastructure Controller	Version 3.2(3n)
Cisco Application Policy Infrastructure Controller	Version 3.2(3o)
Cisco Application Policy Infrastructure Controller	Version 3.2(3r)
Cisco Application Policy Infrastructure Controller	Version 3.2(3s)
Cisco Application Policy Infrastructure Controller	Version 3.2(41d)
Cisco Application Policy Infrastructure Controller	Version 3.2(4d)
Cisco Application Policy Infrastructure Controller	Version 3.2(4e)
Cisco Application Policy Infrastructure Controller	Version 3.2(5d)
Cisco Application Policy Infrastructure Controller	Version 3.2(5e)
Cisco Application Policy Infrastructure Controller	Version 3.2(5f)
Cisco Application Policy Infrastructure Controller	Version 3.2(6i)
Cisco Application Policy Infrastructure Controller	Version 3.2(7f)
Cisco Application Policy Infrastructure Controller	Version 3.2(7k)
Cisco Application Policy Infrastructure Controller	Version 3.2(8d)
Cisco Application Policy Infrastructure Controller	Version 3.2(9b)
Cisco Application Policy Infrastructure Controller	Version 3.2(9f)
Cisco Application Policy Infrastructure Controller	Version 3.2(9h)
Cisco Application Policy Infrastructure Controller	Version 4.0(1h)
Cisco Application Policy Infrastructure Controller	Version 4.0(2c)
Cisco Application Policy Infrastructure Controller	Version 4.0(3c)
Cisco Application Policy Infrastructure Controller	Version 4.0(3d)
Cisco Application Policy Infrastructure Controller	Version 4.1(1a)
Cisco Application Policy Infrastructure Controller	Version 4.1(1i)
Cisco Application Policy Infrastructure Controller	Version 4.1(1j)
Cisco Application Policy Infrastructure Controller	Version 4.1(1k)
Cisco Application Policy Infrastructure Controller	Version 4.1(1l)
Cisco Application Policy Infrastructure Controller	Version 4.1(2g)
Cisco Application Policy Infrastructure Controller	Version 4.1(2m)
Cisco Application Policy Infrastructure Controller	Version 4.1(2o)
Cisco Application Policy Infrastructure Controller	Version 4.1(2s)
Cisco Application Policy Infrastructure Controller	Version 4.1(2u)
Cisco Application Policy Infrastructure Controller	Version 4.1(2w)
Cisco Application Policy Infrastructure Controller	Version 4.1(2x)
Cisco Application Policy Infrastructure Controller	Version 4.2(1g)
Cisco Application Policy Infrastructure Controller	Version 4.2(1i)
Cisco Application Policy Infrastructure Controller	Version 4.2(1j)
Cisco Application Policy Infrastructure Controller	Version 4.2(1l)
Cisco Application Policy Infrastructure Controller	Version 4.2(2e)
Cisco Application Policy Infrastructure Controller	Version 4.2(2f)
Cisco Application Policy Infrastructure Controller	Version 4.2(2g)
Cisco Application Policy Infrastructure Controller	Version 4.2(3j)
Cisco Application Policy Infrastructure Controller	Version 4.2(3l)
Cisco Application Policy Infrastructure Controller	Version 4.2(3n)
Cisco Application Policy Infrastructure Controller	Version 4.2(3q)
Cisco Application Policy Infrastructure Controller	Version 4.2(4i)
Cisco Application Policy Infrastructure Controller	Version 4.2(4k)
Cisco Application Policy Infrastructure Controller	Version 4.2(4o)
Cisco Application Policy Infrastructure Controller	Version 4.2(4p)
Cisco Application Policy Infrastructure Controller	Version 4.2(5k)
Cisco Application Policy Infrastructure Controller	Version 4.2(5l)
Cisco Application Policy Infrastructure Controller	Version 4.2(5n)
Cisco Application Policy Infrastructure Controller	Version 4.2(6d)
Cisco Application Policy Infrastructure Controller	Version 4.2(6g)
Cisco Application Policy Infrastructure Controller	Version 4.2(6h)
Cisco Application Policy Infrastructure Controller	Version 4.2(6l)
Cisco Application Policy Infrastructure Controller	Version 4.2(6o)
Cisco Application Policy Infrastructure Controller	Version 4.2(7f)
Cisco Application Policy Infrastructure Controller	Version 4.2(7l)
Cisco Application Policy Infrastructure Controller	Version 4.2(7q)
Cisco Application Policy Infrastructure Controller	Version 4.2(7r)
Cisco Application Policy Infrastructure Controller	Version 4.2(7s)
Cisco Application Policy Infrastructure Controller	Version 4.2(7t)
Cisco Application Policy Infrastructure Controller	Version 4.2(7u)
Cisco Application Policy Infrastructure Controller	Version 4.2(7v)
Cisco Application Policy Infrastructure Controller	Version 4.2(7w)
Cisco Application Policy Infrastructure Controller	Version 5.0(1k)
Cisco Application Policy Infrastructure Controller	Version 5.0(1l)
Cisco Application Policy Infrastructure Controller	Version 5.0(2e)
Cisco Application Policy Infrastructure Controller	Version 5.0(2h)
Cisco Application Policy Infrastructure Controller	Version 5.1(1h)
Cisco Application Policy Infrastructure Controller	Version 5.1(2e)
Cisco Application Policy Infrastructure Controller	Version 5.1(3e)
Cisco Application Policy Infrastructure Controller	Version 5.1(4c)
Cisco Application Policy Infrastructure Controller	Version 5.2(1g)
Cisco Application Policy Infrastructure Controller	Version 5.2(2e)
Cisco Application Policy Infrastructure Controller	Version 5.2(2f)
Cisco Application Policy Infrastructure Controller	Version 5.2(2g)
Cisco Application Policy Infrastructure Controller	Version 5.2(2h)
Cisco Application Policy Infrastructure Controller	Version 5.2(3e)
Cisco Application Policy Infrastructure Controller	Version 5.2(3f)
Cisco Application Policy Infrastructure Controller	Version 5.2(3g)
Cisco Application Policy Infrastructure Controller	Version 5.2(4d)
Cisco Application Policy Infrastructure Controller	Version 5.2(4e)
Cisco Application Policy Infrastructure Controller	Version 5.2(4f)
Cisco Application Policy Infrastructure Controller	Version 5.2(4h)
Cisco Application Policy Infrastructure Controller	Version 5.2(5c)
Cisco Application Policy Infrastructure Controller	Version 5.2(5d)
Cisco Application Policy Infrastructure Controller	Version 5.2(5e)
Cisco Application Policy Infrastructure Controller	Version 5.2(6e)
Cisco Application Policy Infrastructure Controller	Version 5.2(6g)
Cisco Application Policy Infrastructure Controller	Version 5.2(6h)
Cisco Application Policy Infrastructure Controller	Version 5.2(7f)
Cisco Application Policy Infrastructure Controller	Version 5.2(7g)
Cisco Application Policy Infrastructure Controller	Version 5.2(8d)
Cisco Application Policy Infrastructure Controller	Version 5.2(8e)
Cisco Application Policy Infrastructure Controller	Version 5.2(8f)
Cisco Application Policy Infrastructure Controller	Version 5.2(8g)
Cisco Application Policy Infrastructure Controller	Version 5.2(8h)
Cisco Application Policy Infrastructure Controller	Version 5.2(8i)
Cisco Application Policy Infrastructure Controller	Version 5.3(1d)
Cisco Application Policy Infrastructure Controller	Version 5.3(2a)
Cisco Application Policy Infrastructure Controller	Version 5.3(2b)
Cisco Application Policy Infrastructure Controller	Version 5.3(2c)
Cisco Application Policy Infrastructure Controller	Version 5.3(2d)
Cisco Application Policy Infrastructure Controller	Version 5.3(2e)
Cisco Application Policy Infrastructure Controller	Version 6.0(1g)
Cisco Application Policy Infrastructure Controller	Version 6.0(1j)
Cisco Application Policy Infrastructure Controller	Version 6.0(2h)
Cisco Application Policy Infrastructure Controller	Version 6.0(2j)
Cisco Application Policy Infrastructure Controller	Version 6.0(3d)
Cisco Application Policy Infrastructure Controller	Version 6.0(3e)
Cisco Application Policy Infrastructure Controller	Version 6.0(3g)
Cisco Application Policy Infrastructure Controller	Version 6.0(4c)
Cisco Application Policy Infrastructure Controller	Version 6.0(5h)
Cisco Application Policy Infrastructure Controller	Version 6.0(5j)
Cisco Application Policy Infrastructure Controller	Version 6.0(6c)
Cisco Application Policy Infrastructure Controller	Version 6.0(7e)
Cisco Application Policy Infrastructure Controller	Version 6.0(8d)
Cisco Application Policy Infrastructure Controller	Version 6.1(1f)

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5

Source: psirt@cisco.com

Vendor Advisory

Timeline

No history available yet.