Arbitrary Command Execution Vulnerability in Cisco Secure Firewall Software

CVE-2025-20220

What is CVE-2025-20220?

An input validation flaw in the command-line interface (CLI) of Cisco Secure Firewall Management Center and Cisco Secure Firewall Threat Defense software allows an authenticated local attacker to inject and execute arbitrary operating system commands with root privileges. By exploiting this vulnerability, an attacker possessing valid Administrator credentials can escape the restricted command prompt and take control of the underlying operating system. This risk emphasizes the importance of stringent input validation in maintaining the security of network management systems.

References