Is CVE-2025-20200 being actively exploited?

CVE-2025-20200 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2025-20200?

CVE-2025-20200 has a CVSS 3.1 base score of 6.7 (MEDIUM).

CVE-2025-20200

MEDIUM · CVSS 6.7EPSS 0.2%EU EUVD

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.

Key facts

CVSS score: 6.7 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N
Weakness (CWE): CWE-754
EPSS score: 0.2% (6th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2025-13891)
Published: May 7, 2025
NVD last modified: June 17, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2025-13891 in the EU Vulnerability Database. Last updated in EUVD on February 26, 2026.

View on the EU Vulnerability Database

Affected products

cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe

and 360 more…

Certified products that may be affected

17 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Embedded Services 9300 and 3300 Series Switches (ESS9300 & ESS3300) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11662-2026 - active
Cisco Catalyst 8000V Edge (C8000V) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria Certificate Number: 2025/161 - active
Cisco 1000 Series Integrated Services Routers (C1100), Cisco Catalyst IR1800 Rugged Series Routers (IR1800), Cisco Catalyst IR8300 Rugged Series Routers (IR8300) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11643-2025 - active
Cisco Catalyst Industrial Ethernet 9300 Rugged Series Switches running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11603-2025 - active
Cisco Aggregation Services Router 1000 Series (ASR1K), Cisco Catalyst 8200, 8300, 8500 Series Edge Routers (Cat8K) running IOS-XE version 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11642-2025 - active

See all 17 in the Security Certifications Explorer.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain