CVE-2025-20265
Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability
Description
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input during the authentication phase. An attacker could exploit this vulnerability by sending crafted input when entering credentials that will be authenticated at the configured RADIUS server. A successful exploit could allow the attacker to execute commands at a high privilege level. Note: For this vulnerability to be exploited, Cisco Secure FMC Software must be configured for RADIUS authentication for the web-based management interface, SSH management, or both.
Weakness: CWE-74
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Management Center Check your version | Network & Security Management | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco Firepower Management Center
Vendor advisory
cisco-sa-fmc-radius-rce-TNBKf79
Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability
Cisco’s rating: Critical (advisory CVSS 10.0) · Published Aug 14, 2025
Bug ID: CSCwo91250
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from