CVE-2025-20178

CVE-2025-20178 is a critical vulnerability in Cisco Secure Network Analytics' web-based management interface, allowing authenticated administrative users to execute arbitrary commands as root. The flaw stems from insufficient integrity checks in device backup files, enabling an attacker to craft and restore a malicious backup to gain shell access. With a CVSS score of 7.2 (HIGH), this vulnerability has a network attack vector, low attack complexity, and results in high impact to confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness.