References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cmd-inject-rPJM8BGL https://nvd.nist.gov/vuln/detail/CVE-2025-20334 https://zeropath.com/blog/cve-2025-20334-cisco-ios-xe-command-injection-summary https://www.appsecure.security/vulnerability-database/cve-2025-20334/ https://cve.circl.lu/cve/CVE-2025-20334 https://www.sentinelone.com/vulnerability-database/cve-2025-20334/ https://www.tenable.com/plugins/nessus/271830 https://cn-sec.com/archives/4603661.html https://vigilance.fr/vulnerability/Cisco-IOS-XE-code-execution-via-HTTP-API-Command-Injection-48282 https://www.xtcaq.com/nd.jsp?id=10072
Related VulnerabilitiesCisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload思科系统(中国)网络技术有限公司Cisco AP WebUI存在弱口令PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication BypassCisco Catalyst SD-WAN身份验证绕过漏洞Cisco Catalyst SD-WAN 权限绕过漏洞(CVE-2026-20127)Cisco Asyncos 整数溢出漏洞 可导致远程代码执行PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster EnumerationCisco Any Router and Switch 默认口令漏洞Cisco IOS 缓冲区溢出漏洞PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)Cisco IOS XE Software 命令注入漏洞