IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.0Kritisch

CVE-2025-20363

Cisco IOS; Cisco Cisco IOS XR Software; Cisco Cisco Adaptive Security Appliance (ASA) Software; Cisco Cisco IOS XE Software Veröffentlicht: (vor 1 Jahr)

Beschreibung

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker (Cisco ASA and FTD Software) or authenticated, remote attacker (Cisco IOS, IOS XE, and IOS XR Software) with low user privileges to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web service on an affected device after obtaining additional information about the system, overcoming exploit mitigations, or both. A successful exploit could allow the attacker to execute arbitrary code as root, which may lead to the complete compromise of the affected device. For more information about this vulnerability, see the Details ["#details"] section of this advisory.

Schwachstellentyp (CWE): CWE-122

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
cisco adaptive security appliance software 9.12 – < 9.12.4.72
Cisco Cisco Adaptive Security Appliance (ASA) Software 9.8.1, 9.8.1.5, 9.8.1.7, 9.8.2, 9.8.2.8, 9.8.2.14, 9.8.2.15, 9.8.2.17, 9.8.2.20, 9.8.2.24, 9.8.2.26, 9.8.2.28, 9.8.2.33, 9.8.2.35, 9.8.2.38, 9.8.3.8, 9.8.3.11, 9.8.3.14, 9.8.3.16, 9.8.3.18, 9.8.3.21, 9.8.3, 9.8.3.26, 9.8.3.29, 9.8.4, 9.8.4.3, 9.8.4.7, 9.8.4.8, 9.8.4.10, 9.8.4.12, 9.8.4.15, 9.8.4.17, 9.8.2.45, 9.8.4.25, 9.8.4.20, 9.8.4.22, 9.8.4.26, 9.8.4.29, 9.8.4.32, 9.8.4.33, 9.8.4.34, 9.8.4.35, 9.8.4.39, 9.8.4.40, 9.8.4.41, 9.8.4.43, 9.8.4.44, 9.8.4.45, 9.8.4.46, 9.8.4.48, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.2, 9.12.3.7, 9.12.4, 9.12.3.12, 9.12.3
Cisco Cisco Firepower Threat Defense Software 6.2.3, 6.2.3.1, 6.2.3.2, 6.2.3.3, 6.2.3.4, 6.2.3.5, 6.2.3.6, 6.2.3.7, 6.2.3.8, 6.2.3.10, 6.2.3.11, 6.2.3.9, 6.2.3.12, 6.2.3.13, 6.2.3.14, 6.2.3.15, 6.2.3.16, 6.2.3.17, 6.2.3.18, 6.6.0, 6.6.0.1, 6.6.1, 6.6.3, 6.6.4, 6.6.5, 6.6.5.1, 6.6.5.2, 6.6.7, 6.6.7.1, 6.6.7.2, 6.4.0, 6.4.0.1, 6.4.0.3, 6.4.0.2, 6.4.0.4, 6.4.0.5, 6.4.0.6, 6.4.0.7, 6.4.0.8, 6.4.0.9, 6.4.0.10, 6.4.0.11, 6.4.0.12, 6.4.0.13, 6.4.0.14, 6.4.0.15, 6.4.0.16, 6.4.0.17, 6.4.0.18, 7.0.0, 7.0.0.1, 7.0.1, 7.0.1.1, 7.0.2, 7.0.2.1, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.6.1, 7.0.6.2, 7.0.6.3, 7.0.7, 7.1.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.2.0, 7.2.0.
Cisco Cisco IOS XE Software 3.2.0SG, 3.2.1SG, 3.2.2SG, 3.2.3SG, 3.2.4SG, 3.2.5SG, 3.2.6SG, 3.2.7SG, 3.2.8SG, 3.2.9SG, 3.2.10SG, 3.2.11SG, 3.7.0S, 3.7.1S, 3.7.2S, 3.7.3S, 3.7.4S, 3.7.5S, 3.7.6S, 3.7.7S, 3.7.4aS, 3.7.2tS, 3.7.0bS, 3.7.1aS, 3.3.0SG, 3.3.2SG, 3.3.1SG, 3.8.0S, 3.8.1S, 3.8.2S, 3.9.1S, 3.9.0S, 3.9.2S, 3.9.1aS, 3.9.0aS, 3.2.0SE, 3.2.1SE, 3.2.2SE, 3.2.3SE, 3.3.0SE, 3.3.1SE, 3.3.2SE, 3.3.3SE, 3.3.4SE, 3.3.5SE, 3.4.0SG, 3.4.2SG, 3.4.1SG, 3.4.3SG, 3.4.4SG, 3.4.5SG, 3.4.6SG, 3.4.7SG, 3.4.8SG, 3.5.0E, 3.5.1E, 3.5.2E, 3.5.3E, 3.11.1S, 3.11.2S, 3.11.0S, 3.11.3S, 3.11.4S, 3.12.0S, 3.12.1S, 3.12.2S, 3.12.3S, 3.12.0aS, 3.1
Cisco Cisco IOS XR Software 6.5.1, 6.5.2, 6.5.3, 6.6.2, 6.6.3, 6.6.25, 6.7.1, 6.7.2, 6.7.3, 6.8.1, 6.8.2, 6.9.1, 6.9.2
Cisco IOS 12.2(15)B, 12.2(16)B1, 12.2(16)B2, 12.2(16)B, 12.2(15)BC2a, 12.2(15)BC1a, 12.2(15)BC1b, 12.2(15)BC2d, 12.2(15)BC2g, 12.2(15)BC1g, 12.2(15)BC2i, 12.2(15)BC1c, 12.2(15)BC2c, 12.2(15)BC2f, 12.2(15)BC1d, 12.2(15)BC1, 12.2(15)BC2, 12.2(15)BC2e, 12.2(15)BC1e, 12.2(15)BC2h, 12.2(15)BC1f, 12.2(15)BC2b, 12.2(15)BX, 12.2(16)BX, 12.2(16)BX2, 12.2(16)BX3, 12.2(16)BX1, 12.2(15)BZ2, 12.2(15)CX, 12.2(15)CX1, 12.2(33)CX, 12.2(33)CY, 12.2(33)CY1, 12.2(33)CY2, 12.2(15)MC1c, 12.2(15)MC2g, 12.2(15)MC2k, 12.2(15)MC1b, 12.2(15)MC2b, 12.2(15)MC2a, 12.2(15)MC2m, 12.2(15)MC1, 12.2(15)MC2, 12.2(15)MC2f, 12.2(15)MC2j, 1
cisco ios xe 3.2.0sg – ≤ 17.17.1
cisco ios xr 6.5.1
cisco secure firewall threat defense 7.0.0 – < 7.0.8

Referenzen und Patches

CPE-Treffer (NVD) (28)
  • cpe:2.3:o:cisco:ios_xr:6.5.1:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.5.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.5.3:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.6.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.6.3:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.6.25:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.7.1:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.7.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.7.3:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.8.1:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.8.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.9.1:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:ios_xr:6.9.2:*:*:*:*:*:x86:*
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.12 < 9.12.4.72
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.14 < 9.14.4.28
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.16 < 9.16.4.84
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.17.1 < 9.18.4.57
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.19.1 < 9.19.1.42
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.20.1 < 9.20.3.16
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.22 < 9.22.2
  • cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* ≥ 9.23 < 9.23.1.3
  • cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:* ≥ 12.2\(15\)b ≤ 15.9\(3\)m11
  • cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* ≥ 3.2.0sg ≤ 17.17.1
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.8
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 7.1.0 < 7.2.10
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 7.3.0 < 7.4.2.3
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:* ≥ 7.7.0 < 7.7.10
  • cpe:2.3:a:cisco:secure_firewall_threat_defense:7.6.0:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Cisco IOS / IOS XE / ASA

8.6Hoch
CVE-2026-76418 KEV

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software; Cisco Cisco Secure Firewall Threat Defense (FTD) Software

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unex…

5.3Mittel
CVE-2026-76445

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulner…

7.5Hoch
CVE-2026-20356

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Cisco Cyber Vision; Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that add…

7.5Hoch
CVE-2026-20236

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Cisco Cyber Vision; Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that add…