CVE-2025-20135— Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞
Possible ATT&CK Techniques 2AI
T1133 · External Remote Services T1499.002 · Service Exhaustion Flood新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-20135の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Adaptive Security Appliance and Firepower Threat Defense Software DHCP Denial of Service Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to exhaust available memory. This vulnerability is due to improper validation of incoming DHCP packets. An attacker could exploit this vulnerability by repeatedly sending crafted DHCPv4 packets to an affected device. A successful exploit could allow the attacker to exhaust available memory, which would affect availability of services and prevent new processes from starting, resulting in a Denial of Service (DoS) condition that would require a manual reboot. Note: On Cisco Secure FTD Software, this vulnerability does not affect management interfaces.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
在移除最后引用时对内存的释放不恰当(内存泄露)
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense都是美国思科（Cisco）公司的产品。Cisco Secure Firewall Adaptive Security Appliance是一个企业级防火墙软件。Cisco Secure Firewall Threat Defense是一个集成式防火墙平台。 Cisco Secure Firewall Adaptive Security
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.12.3 | - | |
| Cisco | Cisco Firepower Threat Defense Software | 6.2.3.14 | - |
II. CVE-2025-20135の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-20135のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Cisco · 2025-08-14 · 29 CVEs total
| CVE-2025-20265 | 10.0 CRITICAL | Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerabilit |
| CVE-2025-20133 | 8.6 HIGH | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw |
| CVE-2025-20222 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer V |
| CVE-2025-20217 | 8.6 HIGH | Cisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability |
| CVE-2025-20239 | 8.6 HIGH | Cisco多款产品 安全漏洞 |
| CVE-2025-20243 | 8.6 HIGH | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw |
| CVE-2025-20253 | 8.6 HIGH | Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat |
| CVE-2025-20263 | 8.6 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi |
| CVE-2025-20136 | 8.6 HIGH | Cisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Tr |
| CVE-2025-20134 | 8.6 HIGH | Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificat |
| CVE-2025-20148 | 8.5 HIGH | Cisco Secure Firewall Management Center HTML Injection Vulnerability |
| CVE-2025-20251 | 8.5 HIGH | Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense |
| CVE-2025-20244 | 7.7 HIGH | Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw |
| CVE-2025-20127 | 7.7 HIGH | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firep |
| CVE-2025-20301 | 6.5 MEDIUM | Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability |
| CVE-2025-20235 | 6.1 MEDIUM | Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability |
| CVE-2025-20237 | 6.0 MEDIUM | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏 |
| CVE-2025-20238 | 6.0 MEDIUM | Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏 |
| CVE-2025-20220 | 6.0 MEDIUM | Cisco Secure Firewall Management Center和Cisco Secure Firewall Threat Defense 操作系统命令注入漏洞 |
| CVE-2025-20225 | 5.8 MEDIUM | Cisco多款产品 安全漏洞 |
Showing 20 of 29 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2025-20254
Cisco Secure Firewall Adaptive Security Appliance和Cisco Secu - CVE-2025-20263
Cisco Adaptive Security Appliance Software and Firepower Thr - CVE-2025-20253
Cisco IOS, IOS XE, Secure Firewall Adaptive Security Applian - CVE-2025-20252
Cisco Secure Firewall Management Center和Cisco Secure Firewal - CVE-2025-20251
Cisco Secure Firewall Adaptive Security Appliance and Cisco
同じベンダー: Cisco
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20244
ClamAV DMG File Processing Denial of Service Vulnerability - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust
同じ弱点: CWE-401
- CVE-2026-61870
ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder - CVE-2026-56366
ImageMagick - Memory Leak in META Reader APP1JPEG Error Path - CVE-2026-57027
Junos OS: EX4100 Series, EX4400: With sFlow configured in a - CVE-2026-10699
Memory leak in SFTP service can result in a denial of servic - CVE-2026-13698
OpenVPN 资源管理错误漏洞
V. CVE-2025-20135へのコメント
まだコメントはありません