CVE-2025-20219 in ASAthông tin

Tóm tắt

Bởi MITRE • 14/08/2025

A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should have been blocked to a loopback interface.

This vulnerability is due to improper enforcement of access control rules for loopback interfaces. An attacker could exploit this vulnerability by sending traffic to a loopback interface on an affected device. A successful exploit could allow the attacker to bypass configured access control rules and send traffic that should have been blocked to a loopback interface on the device.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

chịu trách nhiệm

Cisco

Đặt trước

10/10/2024

Tiết lộ

14/08/2025

Kiểm duyệt

được chấp nhận

EPSS

0.00383

KEV

không

Các hoạt động

rất thấp

Nguồn

Do you want to use VulDB in your project?

Use the official API to access entries easily!