CVE-2025-20219

A vulnerability in the implementation of access control rules for loopback interfaces in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to send traffic that should have been blocked to a loopback interface. This vulnerability is due to improper enforcement of access control rules for loopback interfaces. An attacker could exploit this vulnerability by sending traffic to a loopback interface on an affected device. A successful exploit could allow the attacker to bypass configured access control rules and send traffic that should have been blocked to a loopback interface on the device.

• CWE-284

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-acl-bypass-mtPze9Yh

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20213A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager,…5.5
• CVE-2025-20214A vulnerability in the Network Configuration Access Control …4.3
• CVE-2025-20215A vulnerability in the meeting-join functionality of Cisco W…5.4
• CVE-2025-20216A vulnerability in the web interface of Cisco Catalyst SD-WA…4.3
• CVE-2025-20217A vulnerability in the packet inspection functionality of th…8.6
• CVE-2025-20218A vulnerability in the web-based management interface of Cis…4.9
• CVE-2025-2022Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote C…7.8
• CVE-2025-20220A vulnerability in the CLI of Cisco Secure Firewall Manageme…6
• CVE-2025-20221A vulnerability in the packet filtering features of Cisco IO…9.1
• CVE-2025-20222A vulnerability in the RADIUS proxy feature for the IPsec VP…8.6
• CVE-2025-20223A vulnerability in Cisco Catalyst Center, formerly Cisco DNA…4.7
• CVE-2025-20224A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8