CVE-2025-20363

State: Published
Severity: 9.0 Critical
Published: Sep 25, 2025
Updated: Feb 26, 2026
Reserved: Oct 10, 2024

Description

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker (Cisco ASA and FTD Software) or authenticated, remote attacker (Cisco IOS, IOS XE, and IOS XR Software) with low user privileges to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web service on an affected device after obtaining additional information about the system, overcoming exploit mitigations, or both. A successful exploit could allow the attacker to execute arbitrary code as root, which may lead to the complete compromise of the affected device. For more information about this vulnerability, see the Details ["#details"] section of this advisory.

Scores

CVSS	Score	Vector	Source
3.1	9.0 Critical	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H	cisco

Weaknesses

CWE-122 Heap-based Buffer Overflow

Affected Products

Product	Versions
IOSCisco	12.2(15)BAffected 12.2(16)B1Affected 12.2(16)B2Affected 12.2(16)BAffected 12.2(15)BC2aAffected 12.2(15)BC1aAffected 12.2(15)BC1bAffected 12.2(15)BC2dAffected 12.2(15)BC2gAffected 12.2(15)BC1gAffected 12.2(15)BC2iAffected 12.2(15)BC1cAffected 12.2(15)BC2cAffected 12.2(15)BC2fAffected 12.2(15)BC1dAffected 12.2(15)BC1Affected 12.2(15)BC2Affected 12.2(15)BC2eAffected 12.2(15)BC1eAffected 12.2(15)BC2hAffected 12.2(15)BC1fAffected 12.2(15)BC2bAffected 12.2(15)BXAffected 12.2(16)BXAffected 12.2(16)BX2Affected and 1980 more versions
Cisco IOS XR SoftwareCisco	6.5.1Affected 6.5.2Affected 6.5.3Affected 6.6.2Affected 6.6.3Affected 6.6.25Affected 6.7.1Affected 6.7.2Affected 6.7.3Affected 6.8.1Affected 6.8.2Affected 6.9.1Affected 6.9.2Affected
Cisco Adaptive Security Appliance (ASA) SoftwareCisco	9.8.1Affected 9.8.1.5Affected 9.8.1.7Affected 9.8.2Affected 9.8.2.8Affected 9.8.2.14Affected 9.8.2.15Affected 9.8.2.17Affected 9.8.2.20Affected 9.8.2.24Affected 9.8.2.26Affected 9.8.2.28Affected 9.8.2.33Affected 9.8.2.35Affected 9.8.2.38Affected 9.8.3.8Affected 9.8.3.11Affected 9.8.3.14Affected 9.8.3.16Affected 9.8.3.18Affected 9.8.3.21Affected 9.8.3Affected 9.8.3.26Affected 9.8.3.29Affected 9.8.4Affected and 195 more versions
Cisco IOS XE SoftwareCisco	3.2.0SGAffected 3.2.1SGAffected 3.2.2SGAffected 3.2.3SGAffected 3.2.4SGAffected 3.2.5SGAffected 3.2.6SGAffected 3.2.7SGAffected 3.2.8SGAffected 3.2.9SGAffected 3.2.10SGAffected 3.2.11SGAffected 3.7.0SAffected 3.7.1SAffected 3.7.2SAffected 3.7.3SAffected 3.7.4SAffected 3.7.5SAffected 3.7.6SAffected 3.7.7SAffected 3.7.4aSAffected 3.7.2tSAffected 3.7.0bSAffected 3.7.1aSAffected 3.3.0SGAffected and 431 more versions
Cisco Firepower Threat Defense SoftwareCisco	6.2.3Affected 6.2.3.1Affected 6.2.3.2Affected 6.2.3.3Affected 6.2.3.4Affected 6.2.3.5Affected 6.2.3.6Affected 6.2.3.7Affected 6.2.3.8Affected 6.2.3.10Affected 6.2.3.11Affected 6.2.3.9Affected 6.2.3.12Affected 6.2.3.13Affected 6.2.3.14Affected 6.2.3.15Affected 6.2.3.16Affected 6.2.3.17Affected 6.2.3.18Affected 6.6.0Affected 6.6.0.1Affected 6.6.1Affected 6.6.3Affected 6.6.4Affected 6.6.5Affected and 69 more versions

References

cisco-sa-http-code-exec-WmfP3h3O

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.