Cisco’s Double Trouble: Vulnerabilities Unleashed in EPNM & Prime Infrastructure!
Prepare your web defenses! Two sneaky vulnerabilities are lurking in Cisco EPNM and Cisco Prime Infrastructure, ready to unleash stored XSS attacks. One only requires an unauthenticated remote attacker, while the other demands admin credentials. Cisco’s updates are here to save the day, but no quick fixes otherwise. Keep that software updated!
Hot Take:
Apparently, in the world of Cisco vulnerabilities, sharing is caring! Both vulnerabilities offer a buffet of opportunities for attackers to feast on unsuspecting users, with no need to choose just one. So, grab your popcorn and watch as XSS attacks make a grand entrance on the Cisco stage!
Key Points:
- Two separate vulnerabilities in Cisco’s web-based management interface.
- Both vulnerabilities allow for stored XSS attacks.
- First vulnerability (CVE-2025-20120) requires no authentication.
- Second vulnerability (CVE-2025-20203) requires valid admin credentials.
- Cisco has released updates, but there are no workarounds.
Already a member? Log in here