CVE-2025-20218

MEDIUM EPSS 33.6%
Published Aug 14, 202510mo ago · Modified Jun 17, 20261w ago
4.9 CVSS 3.1
Medium
Find Similar
Published Aug 14, 2025 10mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to retrieve sensitive information from an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to retrieve sensitive information from the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.

CVSS Details

Base Score
4.9
Exploitability
1.2
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality High
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
33.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-643

Affected Products 87

VendorProductVersionRange
ciscosecure_firewall_management_center6.2.3any
ciscosecure_firewall_management_center6.2.3.1any
ciscosecure_firewall_management_center6.2.3.2any
ciscosecure_firewall_management_center6.2.3.3any
ciscosecure_firewall_management_center6.2.3.4any
ciscosecure_firewall_management_center6.2.3.5any
ciscosecure_firewall_management_center6.2.3.6any
ciscosecure_firewall_management_center6.2.3.7any
ciscosecure_firewall_management_center6.2.3.8any
ciscosecure_firewall_management_center6.2.3.9any
ciscosecure_firewall_management_center6.2.3.10any
ciscosecure_firewall_management_center6.2.3.11any
ciscosecure_firewall_management_center6.2.3.12any
ciscosecure_firewall_management_center6.2.3.13any
ciscosecure_firewall_management_center6.2.3.14any
ciscosecure_firewall_management_center6.2.3.15any
ciscosecure_firewall_management_center6.2.3.16any
ciscosecure_firewall_management_center6.2.3.17any
ciscosecure_firewall_management_center6.2.3.18any
ciscosecure_firewall_management_center6.4.0any
ciscosecure_firewall_management_center6.4.0.1any
ciscosecure_firewall_management_center6.4.0.2any
ciscosecure_firewall_management_center6.4.0.3any
ciscosecure_firewall_management_center6.4.0.4any
ciscosecure_firewall_management_center6.4.0.5any
ciscosecure_firewall_management_center6.4.0.6any
ciscosecure_firewall_management_center6.4.0.7any
ciscosecure_firewall_management_center6.4.0.8any
ciscosecure_firewall_management_center6.4.0.9any
ciscosecure_firewall_management_center6.4.0.10any
ciscosecure_firewall_management_center6.4.0.11any
ciscosecure_firewall_management_center6.4.0.12any
ciscosecure_firewall_management_center6.4.0.13any
ciscosecure_firewall_management_center6.4.0.14any
ciscosecure_firewall_management_center6.4.0.15any
ciscosecure_firewall_management_center6.4.0.16any
ciscosecure_firewall_management_center6.4.0.17any
ciscosecure_firewall_management_center6.4.0.18any
ciscosecure_firewall_management_center6.6.0any
ciscosecure_firewall_management_center6.6.0.1any
ciscosecure_firewall_management_center6.6.1any
ciscosecure_firewall_management_center6.6.3any
ciscosecure_firewall_management_center6.6.4any
ciscosecure_firewall_management_center6.6.5any
ciscosecure_firewall_management_center6.6.5.1any
ciscosecure_firewall_management_center6.6.5.2any
ciscosecure_firewall_management_center6.6.7any
ciscosecure_firewall_management_center6.6.7.1any
ciscosecure_firewall_management_center6.6.7.2any
ciscosecure_firewall_management_center7.0.0any
ciscosecure_firewall_management_center7.0.0.1any
ciscosecure_firewall_management_center7.0.1any
ciscosecure_firewall_management_center7.0.1.1any
ciscosecure_firewall_management_center7.0.2any
ciscosecure_firewall_management_center7.0.2.1any
ciscosecure_firewall_management_center7.0.3any
ciscosecure_firewall_management_center7.0.4any
ciscosecure_firewall_management_center7.0.5any
ciscosecure_firewall_management_center7.0.6any
ciscosecure_firewall_management_center7.0.6.1any
ciscosecure_firewall_management_center7.0.6.2any
ciscosecure_firewall_management_center7.0.6.3any
ciscosecure_firewall_management_center7.2.0any
ciscosecure_firewall_management_center7.2.0.1any
ciscosecure_firewall_management_center7.2.1any
ciscosecure_firewall_management_center7.2.2any
ciscosecure_firewall_management_center7.2.3any
ciscosecure_firewall_management_center7.2.3.1any
ciscosecure_firewall_management_center7.2.4any
ciscosecure_firewall_management_center7.2.4.1any
ciscosecure_firewall_management_center7.2.5any
ciscosecure_firewall_management_center7.2.5.1any
ciscosecure_firewall_management_center7.2.5.2any
ciscosecure_firewall_management_center7.2.6any
ciscosecure_firewall_management_center7.2.7any
ciscosecure_firewall_management_center7.2.8any
ciscosecure_firewall_management_center7.2.8.1any
ciscosecure_firewall_management_center7.2.9any
ciscosecure_firewall_management_center7.3.0any
ciscosecure_firewall_management_center7.3.1any
ciscosecure_firewall_management_center7.3.1.1any
ciscosecure_firewall_management_center7.3.1.2any
ciscosecure_firewall_management_center7.4.0any
ciscosecure_firewall_management_center7.4.1any
ciscosecure_firewall_management_center7.4.1.1any
ciscosecure_firewall_management_center7.4.2any
ciscosecure_firewall_management_center7.4.2.1any

References 1

  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xpathinj-COrThdMb
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.