Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-20265— Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

CVSS 10.0 · Critical EPSS 0.22% · P45
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-20265

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high privilege level. Note: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
输出中的特殊元素转义处理不恰当(注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Secure Firewall Management Center 注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Secure Firewall Management Center是美国思科（Cisco）公司的一个强大的网络安全管理工具。 Cisco Secure Firewall Management Center存在注入漏洞，该漏洞源于RADIUS认证阶段输入处理不当，可能导致执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
CiscoCisco Firepower Management Center 7.0.7 -

II. Public POCs for CVE-2025-20265

#POC DescriptionSource LinkShenlong Link
1Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker.https://github.com/jordan922/cve2025-20265POC Details
2This is a minimal, educational simulation that demonstrates the _impact_ class of a management-plane parsing RCE (inspired by CVE-2025-20265). It intentionally executes commands from crafted input for local learning only.https://github.com/amalpvatayam67/day08-CISCO-fmc-simPOC Details
3PoC for CVE-2025-20265 Cisco Secure FMC Software RADIUS Remote Code Execution Vulnerabilityhttps://github.com/saruman9/cve_2025_20265POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-20265

请登录查看更多情报信息。

Same Patch Batch · Cisco · 2025-08-14 · 29 CVEs total

CVE-2025-201338.6 HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw
CVE-2025-201348.6 HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software SSL/TLS Certificat
CVE-2025-201368.6 HIGHCisco Adaptive Security Appliance and Firepower Threat Defense Software Network Address Tr
CVE-2025-202638.6 HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Servi
CVE-2025-202538.6 HIGHCisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat
CVE-2025-202438.6 HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw
CVE-2025-202398.6 HIGHCisco多款产品 安全漏洞
CVE-2025-202178.6 HIGHCisco Firepower Threat Defense Intrusion Detection Denial of Service Vulnerability
CVE-2025-202228.6 HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer V
CVE-2025-201488.5 HIGHCisco Secure Firewall Management Center HTML Injection Vulnerability
CVE-2025-202518.5 HIGHCisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense
CVE-2025-201277.7 HIGHCisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firep
CVE-2025-202447.7 HIGHCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Softw
CVE-2025-203016.5 MEDIUMCisco Secure Firewall Management Center Software Authorization Bypass Vulnerability
CVE-2025-202356.1 MEDIUMCisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability
CVE-2025-202386.0 MEDIUMCisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏
CVE-2025-202206.0 MEDIUMCisco Secure Firewall Management Center和Cisco Secure Firewall Threat Defense 操作系统命令注入漏洞
CVE-2025-202376.0 MEDIUMCisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏
CVE-2025-202255.8 MEDIUMCisco多款产品 安全漏洞
CVE-2025-202245.8 MEDIUMCisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏

Showing top 20 of 29 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco Firepower Management Center
Same vendor: Cisco
Same weakness: CWE-74

V. Comments for CVE-2025-20265

No comments yet

Leave a comment