CVE-2023-20219
Cisco Secure Firewall Management Center vulnerability analysis and mitigation

Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. The attacker would need valid device credentials but does not require administrator privileges to exploit this vulnerability. These vulnerabilities are due to insufficient validation of user-supplied input for certain configuration options. An attacker could exploit these vulnerabilities by using crafted input within the device configuration GUI. A successful exploit could allow the attacker to execute arbitrary commands on the device including the underlying operating system which could also affect the availability of the device.


SourceNVD

Related Cisco Secure Firewall Management Center vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-20265CRITICAL10
  • Cisco Secure Firewall Management CenterCisco Secure Firewall Management Center
  • cpe:2.3:a:cisco:secure_firewall_management_center
NoYesAug 14, 2025
CVE-2025-20301MEDIUM6.5
  • Cisco Secure Firewall Management CenterCisco Secure Firewall Management Center
  • cpe:2.3:a:cisco:secure_firewall_management_center
NoYesAug 14, 2025
CVE-2025-20235MEDIUM6.1
  • Cisco Secure Firewall Management CenterCisco Secure Firewall Management Center
  • cpe:2.3:a:cisco:secure_firewall_management_center
NoYesAug 14, 2025
CVE-2025-20306MEDIUM4.9
  • Cisco Secure Firewall Management CenterCisco Secure Firewall Management Center
  • cpe:2.3:a:cisco:secure_firewall_management_center
NoYesAug 14, 2025
CVE-2025-20302MEDIUM4.3
  • Cisco Secure Firewall Management CenterCisco Secure Firewall Management Center
  • cpe:2.3:a:cisco:secure_firewall_management_center
NoYesAug 14, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management