{"metadata": {"vulnerability": "cve-2025-20213", "count": 31, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 23}}, "data": [{"timestamp": "2024-10-10T19:15:13.232Z", "date_only": false, "value": "2024-10-10T19:15:13.232Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-20213", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-07T15:53:28Z", "date_only": false, "value": "2025-05-07T15:53:28+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-07T16:00:00Z", "date_only": false, "value": "2025-05-07T16:00:00+00:00", "kind": "milestone", "label": "Published", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-07T16:00:00Z", "date_only": false, "value": "2025-05-07T16:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-07T17:18:23.179Z", "date_only": false, "value": "2025-05-07T17:18:23.179Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-20213", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-07T17:18:23.179Z", "date_only": false, "value": "2025-05-07T17:18:23.179Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisco", "record": "cve-2025-20213", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-07T18:15:41Z", "date_only": false, "value": "2025-05-07T18:15:41Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P3QM-WVJX-4JGF", "record": "GHSA-P3QM-WVJX-4JGF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-07T18:15:41.410Z", "date_only": false, "value": "2025-05-07T18:15:41.410000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-1159", "record": "VAR-202505-1159", "field": "sources_release_date.data.1.date"}, {"timestamp": "2025-05-07T18:15:41.410Z", "date_only": false, "value": "2025-05-07T18:15:41.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20213", "record": "FKIE_CVE-2025-20213", "field": "published"}, {"timestamp": "2025-05-07T18:30:49Z", "date_only": false, "value": "2025-05-07T18:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P3QM-WVJX-4JGF", "record": "GHSA-P3QM-WVJX-4JGF", "field": "published"}, {"timestamp": "2025-05-07T18:30:49Z", "date_only": false, "value": "2025-05-07T18:30:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P3QM-WVJX-4JGF", "record": "GHSA-P3QM-WVJX-4JGF", "field": "modified"}, {"timestamp": "2025-05-07T21:31:42Z", "date_only": false, "value": "2025-05-07T21:31:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/24743", "record": "CVE-2025-20213", "field": "creation_timestamp", "uuid": "3c744a92-5cf5-44aa-bb97-5216e4544773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-20213 - Cisco Catalyst SD-WAN Manager Local File System Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-20213 \nPublished : May 7, 2025, 6:15 p.m. | 26\u00a0minutes ago \nDescription : A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system.  \n  \nThis vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user. \nSeverity: 5.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/24743"}, {"timestamp": "2025-05-07T22:00:00Z", "date_only": false, "value": "2025-05-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-07T22:00:00Z", "date_only": false, "value": "2025-05-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-07T22:00:00Z", "date_only": false, "value": "2025-05-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-08T03:56:28.623Z", "date_only": false, "value": "2025-05-08T03:56:28.623516Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-20213", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T03:56:28.623Z", "date_only": false, "value": "2025-05-08T03:56:28.623516Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20213", "record": "FKIE_CVE-2025-20213", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-08T04:22:56Z", "date_only": false, "value": "2025-05-08T04:22:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15470", "record": "CVE-2025-20213", "field": "creation_timestamp", "uuid": "7d39bc5c-40f9-498d-9719-09850afc2467", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-20213\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system.\n\nThis vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.\n\ud83d\udccf Published: 2025-05-07T17:18:23.179Z\n\ud83d\udccf Modified: 2025-05-08T03:56:27.560Z\n\ud83d\udd17 References:\n1. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-fileoverwrite-Uc9tXWH", "url": "https://t.me/DarkWebInformer_CVEAlerts/15470"}, {"timestamp": "2025-05-08T15:55:57Z", "date_only": false, "value": "2025-05-08T15:55:57+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-08T15:55:57Z", "date_only": false, "value": "2025-05-08T15:55:57+00:00", "kind": "other", "label": "Updated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-08T15:56:01Z", "date_only": false, "value": "2025-05-08T15:56:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_cisco \u00b7 CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "record": "CISCO-SA-SDWAN-FILEOVERWRITE-UC9TXWH", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-08T22:00:00Z", "date_only": false, "value": "2025-05-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-08T22:00:00Z", "date_only": false, "value": "2025-05-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-09T08:24:13.175Z", "date_only": false, "value": "2025-05-09T08:24:13.175+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0963", "record": "WID-SEC-W-2025-0963", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-04T14:27:43.787Z", "date_only": false, "value": "2025-08-04T14:27:43.787000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-1159", "record": "VAR-202505-1159", "field": "sources_update_date.data.1.date"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-1159", "record": "VAR-202505-1159", "field": "sources_release_date.data.0.date"}, {"timestamp": "2025-08-05T02:53:00Z", "date_only": false, "value": "2025-08-05T02:53:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202505-1159", "record": "VAR-202505-1159", "field": "sources_update_date.data.0.date"}, {"timestamp": "2025-08-06T23:01:11.162Z", "date_only": false, "value": "2025-08-06T23:01:11.162000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202505-1159", "record": "VAR-202505-1159", "field": "last_update_date"}, {"timestamp": "2026-02-26T18:28:50.198Z", "date_only": false, "value": "2026-02-26T18:28:50.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-20213", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:50.198Z", "date_only": false, "value": "2026-02-26T18:28:50.198Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-20213", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:41:05.573Z", "date_only": false, "value": "2026-06-17T08:41:05.573", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-20213", "record": "FKIE_CVE-2025-20213", "field": "lastModified"}]}