Secure Firewall Management Center
CVE-2025-20301: Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerability
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 6.5
EPSS0.37%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.2 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.1 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 6.4 | See the advisory |
| Cisco Firepower Management Center 6.6 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.3 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.6 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
| Cisco Firepower Management Center 7.4 | See the advisory |
| Cisco Firepower Management Center 7.2 | See the advisory |
| Cisco Firepower Management Center 7.0 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, low-privileged, remote attacker to access troubleshoot files for a different domain.
This vulnerability is due to missing authorization checks. An attacker could exploit this vulnerability by directly accessing a troubleshoot file for a different domain that is managed on the same Cisco Secure FMC instance. A successful exploit could allow the attacker to retrieve a troubleshoot file for a different domain, which could allow the attacker to access sensitive information contained in the troubleshoot file.
Exploitation
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.