Threats tagged 'ghsa-wmwj-gg73-vv5m'

CVE-2025-20349 is a medium severity vulnerability in the REST API of Cisco Catalyst Center that allows an authenticated remote attacker with at least Observer role privileges to execute arbitrary commands as root within a restricted container. The flaw arises from insufficient validation of user-supplied input in API request parameters. Exploitation requires valid user credentials and involves sending crafted API requests to inject commands. No specific affected versions or patch information is provided.