Vulnerability in Cisco Catalyst Sd-Wan Manager
CVE-2025-20157
A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smart Licensing feature. An attacker with a privileged network position could exploit this vulnerability by intercepting traffic that is sent over the Internet. A successful exploit could allow the attacker to gain access to sensitive information, including credentials used by the device to connect to Cisco cloud services.
Vulnerability class: Improper Certificate Validation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.003 (18.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 19th percentile — 18.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: -0.000
Affected products
- Cisco Catalyst Sd-Wan Manager — versions 17.2.4, 17.2.5, 17.2.6
- Cisco Catalyst Sd-Wan Manager — versions 20.1.12, 19.2.1, 18.4.4
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-20157?
- CVE-2025-20157 is a medium-severity vulnerability in Cisco Catalyst Sd-Wan Manager, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2025-05-07.
- How severe is CVE-2025-20157?
- Medium severity. CVSS v3 base score is 5.9 out of 10.