CVE-2025-20219
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Bypass Vulnerability
A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should have been blocked to a loopback interface. This vulnerability is due to improper enforcement of access control rules for loopback interfaces. An attacker could exploit this vulnerability by sending traffic to a loopback interface on an affected device. A successful exploit could allow the attacker to bypass configured access control rules and send traffic that should have been blocked to a loopback interface on the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cisco Adaptive Security Appliance (ASA) Software
- Vendor
- Cisco
- Product
- Cisco Adaptive Security Appliance (ASA) Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.18.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.2.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.2.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.2.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3.39 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.12 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3.46 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.18 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3.53 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3.55 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.3.56 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.1.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.5 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.2.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.28 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.24 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.2.21 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.31 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.29 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.2.22 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.34 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.3 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.40 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.22.1.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.3.4 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.47 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.3.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.37 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.20.3.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.19.1.38 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.18.4.50 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.22.1.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
Cisco Firepower Threat Defense Software
- Vendor
- Cisco
- Product
- Cisco Firepower Threat Defense Software
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 7.3.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.3.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.3.1.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.1.1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.3.1.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.6.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 7.4.2.1 | affected | Unavailable | Unavailable | Unavailable | None listed |