PT-2025-33325 · Cisco · Cisco Secure Firewall Adaptive Security Appliance (Asa)+2
T.Ve
·
Published
2024-10-10
·
Updated
2025-08-15
·
CVE-2025-20237
CVSS v2.0
6.2
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions:
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)
Description:
A vulnerability exists in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software that may allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. The issue is due to insufficient input validation of commands supplied by the user. An attacker could exploit this by authenticating to a device and submitting crafted input for specific commands, potentially allowing them to execute commands on the underlying operating system as root.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Asa
Cisco Secure Firewall Adaptive Security Appliance (Asa)
Cisco Secure Firewall Threat Defense (Ftd)