Summary

• The August 14, 2025, release of the Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software Security Advisory Bundled Publication includes 21 Cisco Security Advisories that describe 29 vulnerabilities in Cisco Secure Firewall ASA, Secure FMC, and Secure FTD Software. Cisco has released software updates that address these vulnerabilities. 

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability	CVE-2025-20265	Critical	10
  Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities	CVE-2025-20224 CVE-2025-20225 CVE-2025-20239 CVE-2025-20252 CVE-2025-20253 CVE-2025-20254	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability	CVE-2025-20222	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability	CVE-2025-20136	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities	CVE-2025-20133 CVE-2025-20243	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability	CVE-2025-20134	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Web Services Denial of Service Vulnerability	CVE-2025-20263	High	8.6
  Cisco Secure Firewall Threat Defense Software Snort 3 Denial of Service Vulnerability	CVE-2025-20217	High	8.6
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Server Denial of Service Vulnerability	CVE-2025-20251	High	8.5
  Cisco Secure Firewall Management Center Software HTML Injection Vulnerability	CVE-2025-20148	High	8.5
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series TLS 1.3 Cipher Denial of Service Vulnerability	CVE-2025-20127	High	7.7
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability	CVE-2025-20244	High	7.7
  Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerabilities	CVE-2025-20301 CVE-2025-20302	Medium	6.5
  Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability	CVE-2025-20235	Medium	6.1
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities	CVE-2025-20237 CVE-2025-20238	Medium	6
  Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Command Injection Vulnerability	CVE-2025-20220	Medium	6
  Cisco Secure Firewall Threat Defense Software Geolocation Remote Access VPN Bypass Vulnerability	CVE-2025-20268	Medium	5.8
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Rules Bypass Vulnerability	CVE-2025-20219	Medium	5.3
  Cisco Secure Firewall Management Center Software Command Injection Vulnerability	CVE-2025-20306	Medium	4.9
  Cisco Secure Firewall Management Center Software XPATH Injection Vulnerability	CVE-2025-20218	Medium	4.9
  Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software DHCP Denial of Service Vulnerability	CVE-2025-20135	Medium	4.3

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A