nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-20363 CVE-2025-20363
CRITICAL
Cisco IOS XR Heap-based Buffer Overflow
Record summary
CVE-2025-20363 has a selected CVSS score of 9.0 (critical).
Description
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker (Cisco ASA and FTD Software) or authenticated, remote attacker (Cisco IOS, IOS XE, and IOS XR Software) with low user privileges to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web service on an affected device after obtaining additional information about the system, overcoming exploit mitigations, or both. A successful exploit could allow the attacker to execute arbitrary code as root, which may lead to the complete compromise of the affected device. For more information about this vulnerability, see the Details ["#details"] section of this advisory.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Oct 6, 2025 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 26, 2025 · Source: CVE List
Affected products and versions
6| Product | Source | Version range | Status |
|---|---|---|---|
Cisco Adaptive Security Appliance (ASA) SoftwareBrowse Cisco / Cisco Adaptive Security Appliance (ASA) Software | CVE List | 9.8.1 | affected |
| 9.8.1.5 | affected | ||
| 9.8.1.7 | affected | ||
| 9.8.2 | affected | ||
| 9.8.2.8 | affected | ||
| 9.8.2.14 | affected | ||
| 9.8.2.15 | affected | ||
| 9.8.2.17 | affected | ||
| 9.8.2.20 | affected | ||
| 9.8.2.24 | affected | ||
| 9.8.2.26 | affected | ||
| 9.8.2.28 | affected | ||
| Showing 12 of 220 version ranges | |||
Cisco Firepower Threat Defense SoftwareBrowse Cisco / Cisco Firepower Threat Defense Software | CVE List | 6.2.3 | affected |
| 6.2.3.1 | affected | ||
| 6.2.3.2 | affected | ||
| 6.2.3.3 | affected | ||
| 6.2.3.4 | affected | ||
| 6.2.3.5 | affected | ||
| 6.2.3.6 | affected | ||
| 6.2.3.7 | affected | ||
| 6.2.3.8 | affected | ||
| 6.2.3.10 | affected | ||
| 6.2.3.11 | affected | ||
| 6.2.3.9 | affected | ||
| Showing 12 of 94 version ranges | |||
Cisco IOS XE SoftwareBrowse Cisco / Cisco IOS XE Software | CVE List | 3.2.0SG | affected |
| 3.2.1SG | affected | ||
| 3.2.2SG | affected | ||
| 3.2.3SG | affected | ||
| 3.2.4SG | affected | ||
| 3.2.5SG | affected | ||
| 3.2.6SG | affected | ||
| 3.2.7SG | affected | ||
| 3.2.8SG | affected | ||
| 3.2.9SG | affected | ||
| 3.2.10SG | affected | ||
| 3.2.11SG | affected | ||
| Showing 12 of 456 version ranges | |||
Cisco IOS XR SoftwareBrowse Cisco / Cisco IOS XR Software | CVE List | 6.5.1 | affected |
| 6.5.2 | affected | ||
| 6.5.3 | affected | ||
| 6.6.2 | affected | ||
| 6.6.3 | affected | ||
| 6.6.25 | affected | ||
| 6.7.1 | affected | ||
| 6.7.2 | affected | ||
| 6.7.3 | affected | ||
| 6.8.1 | affected | ||
| 6.8.2 | affected | ||
| 6.9.1 | affected | ||
| Showing 12 of 13 version ranges | |||
| CVE List | 12.2(15)B | affected | |
| 12.2(16)B1 | affected | ||
| 12.2(16)B2 | affected | ||
| 12.2(16)B | affected | ||
| 12.2(15)BC2a | affected | ||
| 12.2(15)BC1a | affected | ||
| 12.2(15)BC1b | affected | ||
| 12.2(15)BC2d | affected | ||
| 12.2(15)BC2g | affected | ||
| 12.2(15)BC1g | affected | ||
| 12.2(15)BC2i | affected | ||
| 12.2(15)BC1c | affected | ||
| Showing 12 of 2005 version ranges | |||
IOS XRBrowse Cisco / IOS XR | VulnCheck | Version data not supplied | |
References
2cisco-sa-http-code-exec-WmfP3h3O
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-code-exec-WmfP3h3O