Command Injection Vulnerability in Cisco Secure Firewall Products

CVE-2025-20237

What is CVE-2025-20237?

A command injection vulnerability has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. This security issue allows an authenticated local attacker with valid administrative credentials to execute arbitrary commands on the underlying operating system with root-level privileges. The vulnerability arises from insufficient input validation where crafted inputs can be supplied by the attacker. When successful, this exploit can compromise the integrity of the device, leading to significant security risks. For more details on this vulnerability and its impact, visit Cisco's official security advisory page.

References