Cisco Security Updates – 11 September 2025

The addressed vulnerabilities could allow the attacker to perform denial of service attacks, conduct cross-site scripting attacks, perform cross-site request forgery attacks, obtain sensitive information, or bypass security restrictions to the affected product.

Sample of addressed vulnerabilities:

1. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Denial of Service Vulnerability (CVE-2025-20222):

• CVSS: 8.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service

2. Cisco IOS XR Software Image Verification Bypass Vulnerability (CVE-2025- 20248):

• CVSS: 6
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Bypass security

Sample of the affected products:

• Cisco Unified CM.
• Cisco Firepower.
• Cisco EPNM.
• Cisco Prime Infrastructure.
• Cisco Webex Meetings.