Skip to content
OpenAdvisories
High WID-SEC-2025-1841 7 CVEs

Cisco Secure Firewall Management Center: Mehrere Schwachstellen

Published Aug 14, 2025 · Updated Aug 14, 2025 · de-DE

Vendor: Cisco Product: Secure Firewall Management Center

Summary

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco Secure Firewall Management Center ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen und vertrauliche Informationen offenzulegen.

Product

Das Cisco Secure Firewall Management Center ist eine zentralisierte Plattform, die eine Verwaltung und Überwachung von Cisco Firewall-Geräten ermöglicht.

Vulnerabilities 7

  • Critical 10.0
    CVE-2025-20265 Public exploit EPSS 16%

    Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability

    A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device.  This vulnerability is du…

    Cisco Cisco Firepower Management Center Network devices
  • High 8.5
    CVE-2025-20148

    Cisco Secure Firewall Management Center HTML Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to inject arbitrary HTML content into a device-generated document. This vulnerability is due to impro…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 6.5
    CVE-2025-20301

    Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain. This vulnerability is due to missing authorization checks. An…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 6.1
    CVE-2025-20235

    Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability …

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.9
    CVE-2025-20218

    Cisco Secure Firepower Management Center Software XPATH Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient …

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.9
    CVE-2025-20306

    Cisco Secure Firewall Management Center Software Command Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker with Administrator-level privileges to execute arbitrary commands on the underlying operating system.…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 4.3
    CVE-2025-20302

    Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability

    A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to retrieve a generated report from a different domain. This vulnerability is due to missing authorization checks.…

    Cisco Cisco Firepower Management Center Network devices

Revision history

  1. #1

    Initiale Fassung

References