Cisco Secure Network Analytics Privilege Escalation Vulnerability

A vulnerability exists in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager. It allows an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This issue arises from insufficient input validation in certain fields of the management interface. An attacker could exploit this vulnerability by sending crafted input to an affected device, leading to unauthorized command execution with root privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access and execution of commands with root privileges on the affected system.

Remediation

Cisco has released software updates to address this vulnerability. Users can upgrade to Cisco Secure Network Analytics releases 7.4.2, 7.5.0 (SMC ROLLUP20250408-01), 7.5.1 (SMC ROLLUP20250415-01), or 7.5.2 (SMC ROLLUP20250416-01).