Vulnerabilities fixed in Cisco Secure Firewall Software

🗓️ 15 Aug 2025 08:52:41Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 9 Views

Cisco fixes IKEv2 denial-of-service and CVE-2025-20265 RADIUS flaws in Secure Firewall Software.

Reporter	Title	Published	Views	Family All 325
GithubExploit	Exploit for Injection in Cisco Secure_Firewall_Management_Center	15 Aug 202506:35	–	githubexploit
ATTACKERKB	CVE-2025-20237	14 Aug 202516:29	–	attackerkb
ATTACKERKB	CVE-2025-20238	14 Aug 202516:29	–	attackerkb
ATTACKERKB	CVE-2025-20265	14 Aug 202516:30	–	attackerkb
ATTACKERKB	CVE-2025-20220	14 Aug 202516:40	–	attackerkb
ATTACKERKB	CVE-2025-20306	14 Aug 202516:31	–	attackerkb
BDU FSTEC	The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a perpetrator to execute arbitrary commands.	15 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the TLS processing function of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) for the Firepower 3100 Series and Firepower 4200 Series devices allows a attacker to induce a service failure.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) arises from executing a loop with an unavailable exit condition, allowing attackers to cause service failures.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of Cisco Firepower Management Center’s software management interface allows a perpetrator to execute an SSRF attack.	27 Aug 202500:00	–	bdu_fstec

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/viewErp.x

15 Aug 2025 08:52Current

7.9High risk

Vulners AI Score7.9

CVSS 3.110

EPSS0.14468

SSVC

internet key exchange denial of service radius vulnerability secure firewall software update