Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2025-11006 (CVE-2025-20301)
Vulnerability from fstec – Published: 2025-09-12 – Updated: 2025-09-12 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимость программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center), связанная с недостатками процедуры авторизации, позволяющая нарушителю раскрыть конфиденциальную информацию
Summary
Уязвимость программного обеспечения администрирования сети Cisco Secure Firewall Management Center (ранее Cisco Firepower Management Center) связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть конфиденциальную информацию
Severity
Class
Code vulnerability
Status
Confirmed by the vendor
Exploitation
Authorization bypass
Incidents
Being clarified
Remediation
Software update
CWE
- CWE-862 - Отсутствие авторизации
Aliases
References
Impacted products
1 product
from 2 vendors
Vendors
Cisco Systems, Inc.
Products
Cisco Firepower Management Center
Versions
6.2.3 (Cisco Firepower Management Center), 6.4.0 (Cisco Firepower Management Center), 6.2.3.6 (Cisco Firepower Management Center), 6.2.3.1 (Cisco Firepower Management Center), 6.2.3.2 (Cisco Firepower Management Center), 6.4.0.11 (Cisco Firepower Management Center), 6.6.0 (Cisco Firepower Management Center), 6.6.0.1 (Cisco Firepower Management Center), 6.6.1 (Cisco Firepower Management Center), 6.6.3 (Cisco Firepower Management Center), 6.6.4 (Cisco Firepower Management Center), 6.6.7 (Cisco Firepower Management Center), 7.0.0 (Cisco Firepower Management Center), 7.0.0.1 (Cisco Firepower Management Center), 7.0.1 (Cisco Firepower Management Center), 7.0.1.1 (Cisco Firepower Management Center), 7.0.2 (Cisco Firepower Management Center), 7.0.2.1 (Cisco Firepower Management Center), 7.0.3 (Cisco Firepower Management Center), 7.0.4 (Cisco Firepower Management Center), 7.2.0 (Cisco Firepower Management Center), 7.2.1 (Cisco Firepower Management Center), 6.2.3.3 (Cisco Firepower Management Center), 6.2.3.4 (Cisco Firepower Management Center), 6.2.3.5 (Cisco Firepower Management Center), 6.2.3.7 (Cisco Firepower Management Center), 6.2.3.9 (Cisco Firepower Management Center), 6.2.3.10 (Cisco Firepower Management Center), 6.2.3.11 (Cisco Firepower Management Center), 6.2.3.12 (Cisco Firepower Management Center), 6.2.3.13 (Cisco Firepower Management Center), 6.2.3.14 (Cisco Firepower Management Center), 6.2.3.15 (Cisco Firepower Management Center), 6.2.3.16 (Cisco Firepower Management Center), 6.2.3.17 (Cisco Firepower Management Center), 6.2.3.18 (Cisco Firepower Management Center), 6.4.0.1 (Cisco Firepower Management Center), 6.4.0.3 (Cisco Firepower Management Center), 6.4.0.2 (Cisco Firepower Management Center), 6.4.0.4 (Cisco Firepower Management Center), 6.4.0.5 (Cisco Firepower Management Center), 6.4.0.6 (Cisco Firepower Management Center), 6.4.0.7 (Cisco Firepower Management Center), 6.4.0.8 (Cisco Firepower Management Center), 6.4.0.9 (Cisco Firepower Management Center), 6.4.0.10 (Cisco Firepower Management Center), 6.4.0.12 (Cisco Firepower Management Center), 6.4.0.13 (Cisco Firepower Management Center), 6.4.0.14 (Cisco Firepower Management Center), 6.4.0.15 (Cisco Firepower Management Center), 6.4.0.16 (Cisco Firepower Management Center), 6.6.5 (Cisco Firepower Management Center), 6.6.5.1 (Cisco Firepower Management Center), 6.6.5.2 (Cisco Firepower Management Center), 6.6.7.1 (Cisco Firepower Management Center), 7.0.5 (Cisco Firepower Management Center), 7.1.0 (Cisco Firepower Management Center), 7.1.0.1 (Cisco Firepower Management Center), 7.1.0.2 (Cisco Firepower Management Center), 7.1.0.3 (Cisco Firepower Management Center), 7.2.2 (Cisco Firepower Management Center), 7.2.0.1 (Cisco Firepower Management Center), 7.2.3 (Cisco Firepower Management Center), 7.2.3.1 (Cisco Firepower Management Center), 7.3.0 (Cisco Firepower Management Center), 7.3.1 (Cisco Firepower Management Center), 7.3.1.1 (Cisco Firepower Management Center), 7.0.6 (Cisco Firepower Management Center), 7.2.4.1 (Cisco Firepower Management Center), 7.3.1.2 (Cisco Firepower Management Center), 7.2.4 (Cisco Firepower Management Center), 7.2.5 (Cisco Firepower Management Center), 7.4.0 (Cisco Firepower Management Center), 7.4.1 (Cisco Firepower Management Center), 7.4.1.1 (Cisco Firepower Management Center), 7.0.6.1 (Cisco Firepower Management Center), 7.0.6.2 (Cisco Firepower Management Center), 7.2.5.1 (Cisco Firepower Management Center), 7.2.6 (Cisco Firepower Management Center), 7.2.7 (Cisco Firepower Management Center), 7.2.5.2 (Cisco Firepower Management Center), 7.2.8 (Cisco Firepower Management Center), 7.2.8.1 (Cisco Firepower Management Center), 6.2.3.8 (Cisco Firepower Management Center), 6.4.0.17 (Cisco Firepower Management Center), 6.4.0.18 (Cisco Firepower Management Center), 6.6.7.2 (Cisco Firepower Management Center), 7.0.6.3 (Cisco Firepower Management Center), 7.4.2 (Cisco Firepower Management Center), 7.4.2.1 (Cisco Firepower Management Center), 7.0.7 (Cisco Firepower Management Center), 7.2.9 (Cisco Firepower Management Center), 7.6.0 (Cisco Firepower Management Center)
Product types
ПО программно-аппаратных средств защиты
Mitigations
{
"CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:N/A:N",
"CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "6.2.3 (Cisco Firepower Management Center), 6.4.0 (Cisco Firepower Management Center), 6.2.3.6 (Cisco Firepower Management Center), 6.2.3.1 (Cisco Firepower Management Center), 6.2.3.2 (Cisco Firepower Management Center), 6.4.0.11 (Cisco Firepower Management Center), 6.6.0 (Cisco Firepower Management Center), 6.6.0.1 (Cisco Firepower Management Center), 6.6.1 (Cisco Firepower Management Center), 6.6.3 (Cisco Firepower Management Center), 6.6.4 (Cisco Firepower Management Center), 6.6.7 (Cisco Firepower Management Center), 7.0.0 (Cisco Firepower Management Center), 7.0.0.1 (Cisco Firepower Management Center), 7.0.1 (Cisco Firepower Management Center), 7.0.1.1 (Cisco Firepower Management Center), 7.0.2 (Cisco Firepower Management Center), 7.0.2.1 (Cisco Firepower Management Center), 7.0.3 (Cisco Firepower Management Center), 7.0.4 (Cisco Firepower Management Center), 7.2.0 (Cisco Firepower Management Center), 7.2.1 (Cisco Firepower Management Center), 6.2.3.3 (Cisco Firepower Management Center), 6.2.3.4 (Cisco Firepower Management Center), 6.2.3.5 (Cisco Firepower Management Center), 6.2.3.7 (Cisco Firepower Management Center), 6.2.3.9 (Cisco Firepower Management Center), 6.2.3.10 (Cisco Firepower Management Center), 6.2.3.11 (Cisco Firepower Management Center), 6.2.3.12 (Cisco Firepower Management Center), 6.2.3.13 (Cisco Firepower Management Center), 6.2.3.14 (Cisco Firepower Management Center), 6.2.3.15 (Cisco Firepower Management Center), 6.2.3.16 (Cisco Firepower Management Center), 6.2.3.17 (Cisco Firepower Management Center), 6.2.3.18 (Cisco Firepower Management Center), 6.4.0.1 (Cisco Firepower Management Center), 6.4.0.3 (Cisco Firepower Management Center), 6.4.0.2 (Cisco Firepower Management Center), 6.4.0.4 (Cisco Firepower Management Center), 6.4.0.5 (Cisco Firepower Management Center), 6.4.0.6 (Cisco Firepower Management Center), 6.4.0.7 (Cisco Firepower Management Center), 6.4.0.8 (Cisco Firepower Management Center), 6.4.0.9 (Cisco Firepower Management Center), 6.4.0.10 (Cisco Firepower Management Center), 6.4.0.12 (Cisco Firepower Management Center), 6.4.0.13 (Cisco Firepower Management Center), 6.4.0.14 (Cisco Firepower Management Center), 6.4.0.15 (Cisco Firepower Management Center), 6.4.0.16 (Cisco Firepower Management Center), 6.6.5 (Cisco Firepower Management Center), 6.6.5.1 (Cisco Firepower Management Center), 6.6.5.2 (Cisco Firepower Management Center), 6.6.7.1 (Cisco Firepower Management Center), 7.0.5 (Cisco Firepower Management Center), 7.1.0 (Cisco Firepower Management Center), 7.1.0.1 (Cisco Firepower Management Center), 7.1.0.2 (Cisco Firepower Management Center), 7.1.0.3 (Cisco Firepower Management Center), 7.2.2 (Cisco Firepower Management Center), 7.2.0.1 (Cisco Firepower Management Center), 7.2.3 (Cisco Firepower Management Center), 7.2.3.1 (Cisco Firepower Management Center), 7.3.0 (Cisco Firepower Management Center), 7.3.1 (Cisco Firepower Management Center), 7.3.1.1 (Cisco Firepower Management Center), 7.0.6 (Cisco Firepower Management Center), 7.2.4.1 (Cisco Firepower Management Center), 7.3.1.2 (Cisco Firepower Management Center), 7.2.4 (Cisco Firepower Management Center), 7.2.5 (Cisco Firepower Management Center), 7.4.0 (Cisco Firepower Management Center), 7.4.1 (Cisco Firepower Management Center), 7.4.1.1 (Cisco Firepower Management Center), 7.0.6.1 (Cisco Firepower Management Center), 7.0.6.2 (Cisco Firepower Management Center), 7.2.5.1 (Cisco Firepower Management Center), 7.2.6 (Cisco Firepower Management Center), 7.2.7 (Cisco Firepower Management Center), 7.2.5.2 (Cisco Firepower Management Center), 7.2.8 (Cisco Firepower Management Center), 7.2.8.1 (Cisco Firepower Management Center), 6.2.3.8 (Cisco Firepower Management Center), 6.4.0.17 (Cisco Firepower Management Center), 6.4.0.18 (Cisco Firepower Management Center), 6.6.7.2 (Cisco Firepower Management Center), 7.0.6.3 (Cisco Firepower Management Center), 7.4.2 (Cisco Firepower Management Center), 7.4.2.1 (Cisco Firepower Management Center), 7.0.7 (Cisco Firepower Management Center), 7.2.9 (Cisco Firepower Management Center), 7.6.0 (Cisco Firepower Management Center)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-authz-bypass-M7xhnAu",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.10.2024",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "12.09.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "12.09.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-11006",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20301, VulDB ID:320200",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco Firepower Management Center",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0438 Cisco Secure Firewall Management Center (\u0440\u0430\u043d\u0435\u0435 Cisco Firepower Management Center), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 (CWE-862)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0438 Cisco Secure Firewall Management Center (\u0440\u0430\u043d\u0435\u0435 Cisco Firepower Management Center) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.cve.org/CVERecord?id=CVE-2025-20301\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-authz-bypass-M7xhnAu",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-862",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)"
}