PT-2025-33336 · Cisco · Cisco Secure Firewall Threat Defense (Ftd)

Published 2025-08-14 · Updated 2025-08-15 · CVE-2025-20268

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description: A flaw exists in the Geolocation-Based Remote Access (RA) VPN feature that may allow a remote, unauthenticated attacker to circumvent configured HTTP connection policies based on country or region. This issue is due to incomplete URL parsing. An attacker could exploit this by sending a specially crafted HTTP connection through the affected device, potentially gaining access to a network that should have been restricted.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-229

Related Identifiers

BDU:2025-10358

CVE-2025-20268

Affected Products

Cisco Secure Firewall Threat Defense (Ftd)

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-ravpn-geobypass-9h38M37Z · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10358 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20268 · Security Note
• https://twitter.com/VulmonFeeds/status/1956146078710931894 · Twitter Post
• https://twitter.com/0dayPublishing/status/1956045541952926053 · Twitter Post
• https://t.me/CVEtracker/30010 · Telegram Post
• https://twitter.com/CVEnew/status/1956390320817512876 · Twitter Post