Web Management Interface Vulnerability in Cisco Secure Firewall Management Center Software

CVE-2025-20218

What is CVE-2025-20218?

A vulnerability in the web-based management interface of Cisco Secure Firewall Management Center Software permits an authenticated remote attacker to exploit insufficient input validation. By sending a specially crafted request to the web management interface, an attacker can gain unauthorized access to sensitive data stored on the affected device. This security risk requires valid administrative credentials to exploit, making it crucial for users to ensure their systems are protected against such attacks and to remain vigilant in applying security updates.

References