Cisco Security Updates – 22 April 2025

The addressed vulnerabilities could allow the attacker to bypass security restrictions, collect sensitive information, or execute arbitrary commands and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. Cisco Webex App Client-Side Remote Code Execution Vulnerability (CVE-2025-20236):

• CVSS: 8.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

2. Cisco Secure Network Analytics Privilege Escalation Vulnerability (CVE-2024-20440):

• CVSS: 6
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: high
• User Interaction: None
• Consequences: Gain Privileges

Sample of the affected products:

• Cisco Webex App Release 44.6 and 44.7.
• Cisco Smart Licensing Utility Release 2.0.0, 2.1.0 and 2.2.0.