Command Injection Vulnerability in Cisco Secure Firewall Software

CVE-2025-20238

What is CVE-2025-20238?

A command injection vulnerability exists in Cisco Secure Firewall Adaptive Security Appliance and Threat Defense Software, which may allow an authenticated local attacker to execute arbitrary commands on the underlying operating system with root privileges. This vulnerability arises from insufficient input validation of user-supplied commands. To exploit it, an attacker must authenticate to a device and send specially crafted input for certain commands. Successful exploitation can have serious implications, allowing the attacker to gain control over critical system functionalities.

References