Skip to content
fr Sign in
6.0 Medium

CVE-2025-20308 A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute…

Description

A vulnerability in Cisco Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. This vulnerability is due to insufficient restrictions during the execution of specific CLI commands. An attacker could exploit this vulnerability by logging in to the Cisco Spaces Connector CLI as the spacesadmin user and executing a specific command with crafted parameters. A successful exploit could allow the attacker to elevate privileges from the spacesadmin user and execute arbitrary commands on the underlying operating system as root.

Affected products and versions

Product Affected versions Fixed in
Cisco DNA Spaces Connector Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco DNA Spaces Connector

The 6 CVEs of Cisco DNA Spaces Connector →
CVE-2021-1560 Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a… 6.5 Medium CVE-2021-1559 Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, remote attacker to perform a… 6.5 Medium CVE-2021-1558 Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate… 6.0 Medium CVE-2021-1557 Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate… 6.0 Medium
Track this CVE