CVE-2025-20265
BaseFortify
Publication date: 2025-08-14
Last updated on: 2025-08-16
Assigner: Cisco Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | secure_firewall_management_center | 7.0.7 |
| cisco | secure_firewall_management_center | 7.7.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-74 | The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the RADIUS subsystem of Cisco Secure Firewall Management Center (FMC) Software. It allows an unauthenticated remote attacker to inject arbitrary shell commands that the device will execute. The issue arises from improper handling of user input during the authentication phase. An attacker can exploit this by sending specially crafted input when providing credentials to the RADIUS server, potentially executing commands with high privileges on the device. This requires the FMC to be configured to use RADIUS authentication for its web-based or SSH management interfaces.
How can this vulnerability impact me? :
If exploited, this vulnerability can allow an attacker to execute arbitrary commands on the affected device with high privileges without authentication. This could lead to full compromise of the device, unauthorized access, disruption of services, data theft, or further attacks within the network.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, immediately disable RADIUS authentication on Cisco Secure Firewall Management Center (FMC) Software if it is currently enabled for the web-based management interface or SSH management. Alternatively, apply any available security updates or patches from Cisco that address this vulnerability. Additionally, restrict network access to the management interfaces to trusted hosts only until a patch is applied.