{ "schemaVersion": "1.0", "publisher": "脆弱性ナビ", "origin": "https://zeijaku.ittrip.xyz", "terms": [ { "name": "CVE Program", "url": "https://www.cve.org/legal/termsofuse", "notice": "CVE content is used subject to the CVE Program Terms of Use. CVE is a trademark of The MITRE Corporation.", "licenseText": "CVE content: Copyright The MITRE Corporation. CVE is a trademark of The MITRE Corporation.\nCVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.\nDisclaimers: ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE." }, { "name": "NIST NVD", "url": "https://nvd.nist.gov/general/faq", "notice": "This product uses data from the NVD API but is not endorsed or certified by the NVD." }, { "name": "JVN", "url": "https://jvn.jp/contact/index.html", "notice": "出典：JVN（JPCERT/CC・IPA）。原文は各レコードの参照先を確認してください。" }, { "name": "CISA KEV", "url": "https://github.com/cisagov/kev-data", "notice": "Known Exploited Vulnerabilities catalog, CISA. CC0." } ], "records": [ { "id": "CVE-2025-4008", "aliases": [], "title": "MeteoBridge：コード実行", "summary": "MeteoBridge のウェブインターフェースは、CGI シェルスクリプトと C で実装されたエンドポイントにコマンドインジェクションの脆弱性があり、認証されていないリモートの攻撃者が任意のコマンドを実行でき、root 権限でデバイスを制御できる可能性があります。", "risk": "攻撃者が任意のコマンドを実行でき、root 権限でデバイスを制御できる可能性があります。", "product": "MeteoBridge", "category": "other", "component": "package", "severity": "high", "cvss": 8.7, "cvssVersion": "4.0", "cvssSource": "ONEKEY", "cvssVector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "MeteoBridge", "range": "<= 6.1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "label": "CVE：ONEKEY" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4008", "label": "CVE公式レコード" }, { "url": "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "label": "CVE掲載の参考情報" }, { "url": "https://forum.meteohub.de/viewtopic.php?t=18687", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4008", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-05-21T15:31:23.118Z", "modifiedAt": "2026-02-26T18:28:04.093Z", "fetchedAt": "2026-10-24T04:41:31.279Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.\n\nThis web interface exposes an endpoint that is vulnerable to command injection.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.", "sourceTitle": "Arbitrary Command Injection in Smartbedded MeteoBridge", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "MeteoBridge", "vendor": "Smartbedded", "versions": [ { "lessThanOrEqual": "6.1", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-4008", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "fetchedAt": "2026-10-24T04:41:31.279Z", "publishedAt": "2025-05-21T15:31:23.118Z", "modifiedAt": "2026-02-26T18:28:04.093Z", "state": "published", "provider": "ONEKEY", "title": "Arbitrary Command Injection in Smartbedded MeteoBridge", "descriptions": [ { "lang": "en", "value": "The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.\n\nThis web interface exposes an endpoint that is vulnerable to command injection.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Smartbedded", "product": "MeteoBridge", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "6.1", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-306", "lang": "en", "description": "CWE-306 Missing Authentication for Critical Function", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.7, "baseSeverity": "HIGH", "provider": "ONEKEY", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "label": "ONEKEY", "tags": [ "third-party-advisory" ], "provider": "ONEKEY", "sourcePath": "/containers/cna/references/0" }, { "url": "https://forum.meteohub.de/viewtopic.php?t=18687", "label": "ONEKEY", "tags": [ "vendor-advisory" ], "provider": "ONEKEY", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-4008", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"MeteoBridge\",\"vendor\":\"Smartbedded\",\"versions\":[{\"lessThanOrEqual\":\"6.1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.\n\nThis web interface exposes an endpoint that is vulnerable to command injection.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-306\",\"description\":\"CWE-306 Missing Authentication for Critical Function\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"ADJACENT\",\"baseScore\":8.7,\"baseSeverity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-4008:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "sourcePath": "retained:/originalText", "text": "Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-4008:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "modifiedAt": "2025-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:28:04.093Z", "fetchedAt": "2026-10-24T04:41:31.279Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-10-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "MeteoBridgeにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:31.279Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0eb0957d3c0f35cc92c99b0e7d86ab46b65c1cfed2a5eed1ffc819185dc39dcb", "sourceModifiedAt": "2026-02-26T18:28:04.093Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "MeteoBridge のウェブインターフェースは、CGI シェルスクリプトと C で実装されたエンドポイントにコマンドインジェクションの脆弱性があり、認証されていないリモートの攻撃者が任意のコマンドを実行でき、root 権限でデバイスを制御できる可能性があります。", "risk": "攻撃者が任意のコマンドを実行でき、root 権限でデバイスを制御できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者は認証されていないリモートから、MeteoBridge のウェブインターフェースの脆弱なエンドポイントにアクセスできること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "対象は Smartbedded 社の MeteoBridge 製品であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "ウェブインターフェースは CGI シェルスクリプトと C で実装されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E1", "E3" ] }, { "text": "公式の対象表：Smartbedded / MeteoBridge。影響ありとして記載：6.1以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E4" ] }, { "text": "「MeteoBridge」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-4008", "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "https://forum.meteohub.de/viewtopic.php?t=18687", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "https://nvd.nist.gov/vuln/detail/CVE-2025-4008" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-4008", "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "https://forum.meteohub.de/viewtopic.php?t=18687", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "https://nvd.nist.gov/vuln/detail/CVE-2025-4008" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-4008", "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "https://forum.meteohub.de/viewtopic.php?t=18687", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "https://nvd.nist.gov/vuln/detail/CVE-2025-4008" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "label": "CVE：ONEKEY" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-4008", "label": "CVE公式レコード" }, { "url": "https://www.onekey.com/resource/security-advisory-remote-command-execution-on-smartbedded-meteobridge-cve-2025-4008", "label": "CVE掲載の参考情報" }, { "url": "https://forum.meteohub.de/viewtopic.php?t=18687", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4008", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written in CGI shell scripts and C.\n\nThis web interface exposes an endpoint that is vulnerable to command injection.\n\nRemote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "sourceField": "retained:/originalText", "excerpt": "Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourceField": "/containers/cna/title", "excerpt": "Arbitrary Command Injection in Smartbedded MeteoBridge", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/4xxx/CVE-2025-4008.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"MeteoBridge\",\"vendor\":\"Smartbedded\",\"versions\":[{\"lessThanOrEqual\":\"6.1\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-4008", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-4008\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-4008（MeteoBridge）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていないリモートから、MeteoBridge のウェブインターフェースの脆弱なエンドポイントにアクセスできること。\n・対象は Smartbedded 社の MeteoBridge 製品であること。\n・ウェブインターフェースは CGI シェルスクリプトと C で実装されていること。\n・公式の対象表：Smartbedded / MeteoBridge。影響ありとして記載：6.1以下の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-4008", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:31.279Z", "lastSuccess": "2026-10-24T04:41:31.279Z", "sourceCheckedAt": "2026-10-24T04:41:31.279Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2021-21311", "aliases": [], "title": "adminer：脆弱性情報", "summary": "Adminerは単一のPHPファイルで提供されるオープンソースのデータベース管理ツールです。バージョン4.0.0から4.7.9未満までのAdminerにサーバー側リクエスト偽装（SSRF）の脆弱性があり、adminer.phpのようにすべてのドライバを同梱した形で配布されているバージョンが影響を受けます。この脆弱性はバージョン4.7.9で修正されています。", "risk": "この脆弱性が悪用されると、遠隔の攻撃者が潜在的に機密情報を取得できる可能性があります。", "product": "adminer", "category": "other", "component": "package", "severity": "high", "cvss": 7.2, "cvssVersion": "3.1", "cvssSource": "GitHub_M", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "affected": [ { "product": "adminer", "range": ">= 4.0.0, < 4.7.9" } ], "fixed": [], "steps": [ "この脆弱性はバージョン4.7.9で修正されています。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-21311", "label": "CVE公式レコード" }, { "url": "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "label": "CISAが示す関連情報" }, { "url": "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "label": "CVE掲載の参考情報" }, { "url": "https://packagist.org/packages/vrana/adminer", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "label": "[debian-lts-announce] 20210302 [SECURITY] [DLA 2580-1] adminer security update" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21311", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2021-02-11T20:55:15.000Z", "modifiedAt": "2025-10-21T23:35:27.923Z", "fetchedAt": "2026-10-24T04:41:34.996Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.", "sourceTitle": "SSRF in adminer", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "adminer", "vendor": "vrana", "versions": [ { "status": "affected", "version": ">= 4.0.0, < 4.7.9" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2021-21311", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "fetchedAt": "2026-10-24T04:41:34.996Z", "publishedAt": "2021-02-11T20:55:15.000Z", "modifiedAt": "2025-10-21T23:35:27.923Z", "state": "published", "provider": "GitHub_M", "title": "SSRF in adminer", "descriptions": [ { "lang": "en", "value": "Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "vrana", "product": "adminer", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": ">= 4.0.0, < 4.7.9", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "baseScore": 7.2, "baseSeverity": "HIGH", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "label": "CVE", "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://packagist.org/packages/vrana/adminer", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/3" }, { "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "label": "[debian-lts-announce] 20210302 [SECURITY] [DLA 2580-1] adminer security update", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/4" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21311", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"adminer\",\"vendor\":\"vrana\",\"versions\":[{\"status\":\"affected\",\"version\":\">= 4.0.0, < 4.7.9\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-918\",\"description\":\"CWE-918: Server-Side Request Forgery (SSRF)\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"NONE\",\"baseScore\":7.2,\"baseSeverity\":\"HIGH\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2021-21311:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "sourcePath": "retained:/originalText", "text": "Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2021-21311:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:35:27.923Z", "fetchedAt": "2026-10-24T04:41:34.996Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "adminerに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:34.996Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1d4acbc2a2199548724c7509c8a39e6e8231aa571079ad1fd80d5fbc26096175", "sourceModifiedAt": "2025-10-21T23:35:27.923Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Adminerは単一のPHPファイルで提供されるオープンソースのデータベース管理ツールです。バージョン4.0.0から4.7.9未満までのAdminerにサーバー側リクエスト偽装（SSRF）の脆弱性があり、adminer.phpのようにすべてのドライバを同梱した形で配布されているバージョンが影響を受けます。この脆弱性はバージョン4.7.9で修正されています。", "risk": "この脆弱性が悪用されると、遠隔の攻撃者が潜在的に機密情報を取得できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "攻撃者が遠隔からリクエストを送信でき、かつAdminerがバージョン4.0.0以上4.7.9未満で、すべてのドライバを同梱したadminer.php形式で実行されている場合に脆弱性が成立します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：vrana / adminer。影響ありとして記載：>= 4.0.0, < 4.7.9。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ], "evidenceIds": [ "E4" ] }, { "text": "「adminer」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-21311", "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "https://packagist.org/packages/vrana/adminer", "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "https://nvd.nist.gov/vuln/detail/CVE-2021-21311" ] } ], "actions": [ { "text": "この脆弱性はバージョン4.7.9で修正されています。", "kind": "fix", "evidenceIds": [ "E1", "E2" ], "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2021-21311", "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "https://packagist.org/packages/vrana/adminer", "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "https://nvd.nist.gov/vuln/detail/CVE-2021-21311" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2021-21311", "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "https://packagist.org/packages/vrana/adminer", "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "https://nvd.nist.gov/vuln/detail/CVE-2021-21311" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2021-21311", "label": "CVE公式レコード" }, { "url": "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6", "label": "CISAが示す関連情報" }, { "url": "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf", "label": "CVE掲載の参考情報" }, { "url": "https://packagist.org/packages/vrana/adminer", "label": "CVE掲載の参考情報" }, { "url": "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351", "label": "CVE掲載の参考情報" }, { "url": "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html", "label": "[debian-lts-announce] 20210302 [SECURITY] [DLA 2580-1] adminer security update" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21311", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourceField": "/containers/cna/title", "excerpt": "SSRF in adminer", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "sourceField": "retained:/originalText", "excerpt": "Adminer contains a server-side request forgery vulnerability that, when exploited, allows a remote attacker to obtain potentially sensitive information.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2021/21xxx/CVE-2021-21311.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"adminer\",\"vendor\":\"vrana\",\"versions\":[{\"status\":\"affected\",\"version\":\">= 4.0.0, < 4.7.9\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-21311", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2021-21311\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2021-21311（adminer）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者が遠隔からリクエストを送信でき、かつAdminerがバージョン4.0.0以上4.7.9未満で、すべてのドライバを同梱したadminer.php形式で実行されている場合に脆弱性が成立します。\n・公式の対象表：vrana / adminer。影響ありとして記載：>= 4.0.0, < 4.7.9。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2021-21311", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:34.996Z", "lastSuccess": "2026-10-24T04:41:34.996Z", "sourceCheckedAt": "2026-10-24T04:41:34.996Z", "errorCode": null }, "glossary": [ { "term": "SSRF", "meaning": "攻撃者が、サーバーに意図しない宛先へ通信を送らせる問題です。実際に送れる通信や影響の範囲は、それぞれの脆弱性の説明で確認します。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/SSRF", "kind": "general_definition" } ] } }, { "id": "CVE-2025-10035", "aliases": [], "title": "GoAnywhere MFT：脆弱性情報", "summary": "Fortra の GoAnywhere MFT のライセンスサーブレットにデシリアライズ脆弱性があり、正しく偽造されたライセンス応答署名を持つ攻撃者が任意のオブジェクトをデシリアライズできる可能性があります。", "risk": "この脆弱性により、攻撃者が任意のオブジェクトをデシリアライズでき、コマンドインジェクションが発生する可能性があります。", "product": "GoAnywhere MFT", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "3.1", "cvssSource": "Fortra", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "GoAnywhere MFT", "range": "<= 7.8.3（環境: Linux / Windows / MacOS）" }, { "product": "GoAnywhere MFT", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。（環境: Linux / Windows / MacOS）" } ], "fixed": [], "steps": [ "パッチが適用されたバージョン（最新リリース 7.8.4、または Sustaining Release 7.6.3）にアップグレードしてください。", "「CVE-2025-10035」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "label": "CVE：Fortra" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-10035", "label": "CVE公式レコード" }, { "url": "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10035", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-18T22:01:51.337Z", "modifiedAt": "2026-08-04T03:55:56.207Z", "fetchedAt": "2026-10-24T04:41:36.460Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "sourceTitle": "Deserialization Vulnerability in GoAnywhere MFT's License Servlet", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "affected", "platforms": [ "Linux", "Windows", "MacOS" ], "product": "GoAnywhere MFT", "vendor": "Fortra", "versions": [ { "lessThanOrEqual": "7.8.3", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "configurationNotes": "対象環境・機能: Linux / Windows / MacOS。製品バージョンだけでなく、原文の利用条件を照合してください。", "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-10035", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "fetchedAt": "2026-10-24T04:41:36.460Z", "publishedAt": "2025-09-18T22:01:51.337Z", "modifiedAt": "2026-08-04T03:55:56.207Z", "state": "published", "provider": "Fortra", "title": "Deserialization Vulnerability in GoAnywhere MFT's License Servlet", "descriptions": [ { "lang": "en", "value": "A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Fortra", "product": "GoAnywhere MFT", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [ "Linux", "Windows", "MacOS" ], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "7.8.3", "versionType": "semver", "status": "affected" } ] } ], "solutions": [ { "lang": "en", "value": "Upgrade to a patched version (the latest release 7.8.4, or the Sustain Release 7.6.3)", "sourcePath": "/containers/cna/solutions/0/value" } ], "workarounds": [ { "lang": "en", "value": "Immediately ensure that access to the GoAnywhere Admin Console is not open to the public. Exploitation of this vulnerability is highly dependent upon systems being externally exposed to the internet.", "sourcePath": "/containers/cna/workarounds/0/value" } ], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "Fortra", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "label": "Fortra", "tags": [], "provider": "Fortra", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-10035", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"affected\",\"platforms\":[\"Linux\",\"Windows\",\"MacOS\"],\"product\":\"GoAnywhere MFT\",\"vendor\":\"Fortra\",\"versions\":[{\"lessThanOrEqual\":\"7.8.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/solutions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/solutions/0/value", "text": "Upgrade to a patched version (the latest release 7.8.4, or the Sustain Release 7.6.3)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/workarounds/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/workarounds/0/value", "text": "Immediately ensure that access to the GoAnywhere Admin Console is not open to the public. Exploitation of this vulnerability is highly dependent upon systems being externally exposed to the internet.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of Untrusted Data\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"LOW\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-10035:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "sourcePath": "retained:/originalText", "text": "Fortra GoAnywhere MFT contains a deserialization of untrusted data vulnerability allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-10035:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-08-04T03:55:56.207Z", "fetchedAt": "2026-10-24T04:41:36.460Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "GoAnywhere MFTに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:36.460Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6ee1752370452eda984f2076cae55f2851364df74a19d8039d68d9cc2d8f580b", "sourceModifiedAt": "2026-08-04T03:55:56.207Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Fortra の GoAnywhere MFT のライセンスサーブレットにデシリアライズ脆弱性があり、正しく偽造されたライセンス応答署名を持つ攻撃者が任意のオブジェクトをデシリアライズできる可能性があります。", "risk": "この脆弱性により、攻撃者が任意のオブジェクトをデシリアライズでき、コマンドインジェクションが発生する可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "有効な偽造ライセンス応答署名を持つ攻撃者が対象となります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Fortra / GoAnywhere MFT。影響ありとして記載：7.8.3以下の版。対象の環境：Linux、Windows、MacOS。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035" ], "evidenceIds": [ "E7" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E4" ] }, { "text": "「GoAnywhere MFT」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-10035", "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "https://nvd.nist.gov/vuln/detail/CVE-2025-10035" ] } ], "actions": [ { "text": "パッチが適用されたバージョン（最新リリース 7.8.4、または Sustaining Release 7.6.3）にアップグレードしてください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E5" ] }, { "text": "「CVE-2025-10035」と現在の版を管理担当者・提供元へ伝え、この問題に対応した修正版が提供されているか確認します。下の問い合わせ文に記入すれば、そのまま依頼できます。対象範囲の上限から修正版の番号を推測しないでください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-10035", "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "https://nvd.nist.gov/vuln/detail/CVE-2025-10035" ] }, { "text": "対象製品の正規の更新機能、または提供元が指定する配布経路で修正を含む更新を適用します。業務用の機器・サーバーは管理担当者と停止時間を決め、更新に必要な再起動まで完了させてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-10035", "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "https://nvd.nist.gov/vuln/detail/CVE-2025-10035" ] } ], "temporaryMitigations": [ { "text": "GoAnywhere 管理コンソールへのアクセスをインターネット上に公開しないようにしてください。外部からのアクセスがあると本脆弱性が悪用されやすくなります。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E6" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-10035", "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "https://nvd.nist.gov/vuln/detail/CVE-2025-10035" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "label": "CVE：Fortra" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-10035", "label": "CVE公式レコード" }, { "url": "https://www.fortra.com/security/advisories/product-security/fi-2025-012", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10035", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object, possibly leading to command injection.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/title", "excerpt": "Deserialization Vulnerability in GoAnywhere MFT's License Servlet", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"affected\",\"platforms\":[\"Linux\",\"Windows\",\"MacOS\"],\"product\":\"GoAnywhere MFT\",\"vendor\":\"Fortra\",\"versions\":[{\"lessThanOrEqual\":\"7.8.3\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/solutions/0/value", "excerpt": "Upgrade to a patched version (the latest release 7.8.4, or the Sustain Release 7.6.3)", "language": "en", "representation": "source_excerpt" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10035.json", "sourceField": "/containers/cna/workarounds/0/value", "excerpt": "Immediately ensure that access to the GoAnywhere Admin Console is not open to the public. Exploitation of this vulnerability is highly dependent upon systems being externally exposed to the internet.", "language": "en", "representation": "source_excerpt" }, { "id": "E7", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10035", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-10035\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-10035（GoAnywhere MFT）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・有効な偽造ライセンス応答署名を持つ攻撃者が対象となります。\n・公式の対象表：Fortra / GoAnywhere MFT。影響ありとして記載：7.8.3以下の版。対象の環境：Linux、Windows、MacOS。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-10035", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:36.460Z", "lastSuccess": "2026-10-24T04:41:36.460Z", "sourceCheckedAt": "2026-10-24T04:41:36.460Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-20352", "aliases": [], "title": "IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WAN：コード実行", "summary": "Cisco IOS ソフトウェアおよび Cisco IOS XE ソフトウェアの SNMP サブシステムにスタックオーバーフローがあり、認証済みのリモート攻撃者が SNMPv2c 以前の読み取り専用コミュニティ文字列または有効な SNMPv3 ユーザー認証情報を持っている場合、デバイスを再起動させてサービス停止（DoS）させることができ、さらに管理者権限（特権 15）または root 権限を持つ認証情報と組み合わせると、root ユーザーとしてコードを実行し、デバイスを完全に制御できるようになる。攻撃は IPv4 または IPv6 上で細工した SNMP パケットを送信することで行われ、影響はすべての SNMP バージョンに及ぶ。", "risk": "低権限の攻撃者はデバイスを再起動させてサービス停止（DoS）させる可能性があり、高権限の攻撃者は任意のコードを root 権限で実行し、デバイスを完全に制御できる可能性がある。", "product": "IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WAN", "category": "other", "component": "package", "severity": "high", "cvss": 7.7, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "affected": [ { "product": "IOS", "range": "12.2(55)SE" }, { "product": "IOS", "range": "12.2(55)SE3" }, { "product": "IOS", "range": "12.2(55)SE2" }, { "product": "IOS", "range": "12.2(58)SE" }, { "product": "IOS", "range": "12.2(55)SE1" }, { "product": "IOS", "range": "12.2(58)SE1" }, { "product": "IOS", "range": "12.2(55)SE4" }, { "product": "IOS", "range": "12.2(58)SE2" }, { "product": "IOS", "range": "12.2(55)SE5" }, { "product": "IOS", "range": "12.2(55)SE6" }, { "product": "IOS", "range": "12.2(55)SE7" }, { "product": "IOS", "range": "12.2(55)SE8" }, { "product": "IOS", "range": "12.2(55)SE9" }, { "product": "IOS", "range": "12.2(55)SE10" }, { "product": "IOS", "range": "12.2(55)SE11" }, { "product": "IOS", "range": "12.2(55)SE12" }, { "product": "IOS", "range": "12.2(55)SE13" }, { "product": "IOS", "range": "12.2(58)EZ" }, { "product": "IOS", "range": "12.2(53)EZ" }, { "product": "IOS", "range": "12.2(55)EZ" }, { "product": "IOS", "range": "12.2(60)EZ" }, { "product": "IOS", "range": "12.2(60)EZ1" }, { "product": "IOS", "range": "12.2(60)EZ2" }, { "product": "IOS", "range": "12.2(60)EZ3" }, { "product": "IOS", "range": "12.2(60)EZ4" }, { "product": "IOS", "range": "12.2(60)EZ5" }, { "product": "IOS", "range": "12.2(60)EZ6" }, { "product": "IOS", "range": "12.2(60)EZ7" }, { "product": "IOS", "range": "12.2(60)EZ8" }, { "product": "IOS", "range": "12.2(60)EZ9" }, { "product": "IOS", "range": "12.2(60)EZ10" }, { "product": "IOS", "range": "12.2(60)EZ11" }, { "product": "IOS", "range": "12.2(60)EZ12" }, { "product": "IOS", "range": "12.2(60)EZ13" }, { "product": "IOS", "range": "12.2(60)EZ14" }, { "product": "IOS", "range": "12.2(60)EZ15" }, { "product": "IOS", "range": "12.2(33)SXI2" }, { "product": "IOS", "range": "12.2(33)SXI3" }, { "product": "IOS", "range": "12.2(33)SXI5" }, { "product": "IOS", "range": "12.2(33)SXI4a" }, { "product": "IOS", "range": "12.2(33)SXI4" }, { "product": "IOS", "range": "12.2(33)SXI2a" }, { "product": "IOS", "range": "12.2(33)SXI" }, { "product": "IOS", "range": "12.2(33)SXI6" }, { "product": "IOS", "range": "12.2(33)SXI7" }, { "product": "IOS", "range": "12.2(33)SXI1" }, { "product": "IOS", "range": "12.2(33)SXI8" }, { "product": "IOS", "range": "12.2(33)SXI9" }, { "product": "IOS", "range": "12.2(33)SXI8a" }, { "product": "IOS", "range": "12.2(33)SXI10" }, { "product": "IOS", "range": "12.2(33)SXI11" }, { "product": "IOS", "range": "12.2(33)SXI12" }, { "product": "IOS", "range": "12.2(33)SXI13" }, { "product": "IOS", "range": "12.2(33)SXI14" }, { "product": "IOS", "range": "12.2(50)SQ2" }, { "product": "IOS", "range": "12.2(50)SQ1" }, { "product": "IOS", "range": "12.2(50)SQ" }, { "product": "IOS", "range": "12.2(50)SQ3" }, { "product": "IOS", "range": "12.2(50)SQ4" }, { "product": "IOS", "range": "12.2(50)SQ5" }, { "product": "IOS", "range": "12.2(50)SQ6" }, { "product": "IOS", "range": "12.2(50)SQ7" }, { "product": "IOS", "range": "15.3(1)T" }, { "product": "IOS", "range": "15.3(2)T" }, { "product": "IOS", "range": "15.3(1)T1" }, { "product": "IOS", "range": "15.3(1)T2" }, { "product": "IOS", "range": "15.3(1)T3" }, { "product": "IOS", "range": "15.3(1)T4" }, { "product": "IOS", "range": "15.3(2)T1" }, { "product": "IOS", "range": "15.3(2)T2" }, { "product": "IOS", "range": "15.3(2)T3" }, { "product": "IOS", "range": "15.3(2)T4" }, { "product": "IOS", "range": "15.0(1)EY" }, { "product": "IOS", "range": "15.0(1)EY1" }, { "product": "IOS", "range": "15.0(1)EY2" }, { "product": "IOS", "range": "15.0(2)EY" }, { "product": "IOS", "range": "15.0(2)EY1" }, { "product": "IOS", "range": "15.0(2)EY2" }, { "product": "IOS", "range": "15.0(2)EY3" }, { "product": "IOS", "range": "15.0(1)SE" }, { "product": "IOS", "range": "15.0(2)SE" }, { "product": "IOS", "range": "15.0(1)SE1" }, { "product": "IOS", "range": "15.0(1)SE2" }, { "product": "IOS", "range": "15.0(1)SE3" }, { "product": "IOS", "range": "15.0(2)SE1" }, { "product": "IOS", "range": "15.0(2)SE2" }, { "product": "IOS", "range": "15.0(2)SE3" }, { "product": "IOS", "range": "15.0(2)SE4" }, { "product": "IOS", "range": "15.0(2)SE5" }, { "product": "IOS", "range": "15.0(2)SE6" }, { "product": "IOS", "range": "15.0(2)SE7" }, { "product": "IOS", "range": "15.0(2)SE8" }, { "product": "IOS", "range": "15.0(2)SE9" }, { "product": "IOS", "range": "15.0(2)SE10" }, { "product": "IOS", "range": "15.0(2)SE11" }, { "product": "IOS", "range": "15.0(2)SE10a" }, { "product": "IOS", "range": "15.0(2)SE12" }, { "product": "IOS", "range": "15.0(2)SE13" }, { "product": "IOS", "range": "15.0(1)SY" }, { "product": "IOS", "range": "15.0(1)SY1" }, { "product": "IOS", "range": "15.0(1)SY2" }, { "product": "IOS", "range": "15.0(1)SY3" }, { "product": "IOS", "range": "15.0(1)SY4" }, { "product": "IOS", "range": "15.0(1)SY5" }, { "product": "IOS", "range": "15.0(1)SY6" }, { "product": "IOS", "range": "15.0(1)SY7" }, { "product": "IOS", "range": "15.0(1)SY8" }, { "product": "IOS", "range": "15.0(1)SY7a" }, { "product": "IOS", "range": "15.0(1)SY9" }, { "product": "IOS", "range": "15.0(1)SY10" }, { "product": "IOS", "range": "12.2(33)SXJ" }, { "product": "IOS", "range": "12.2(33)SXJ1" }, { "product": "IOS", "range": "12.2(33)SXJ2" }, { "product": "IOS", "range": "12.2(33)SXJ3" }, { "product": "IOS", "range": "12.2(33)SXJ4" }, { "product": "IOS", "range": "12.2(33)SXJ5" }, { "product": "IOS", "range": "12.2(33)SXJ6" }, { "product": "IOS", "range": "12.2(33)SXJ7" }, { "product": "IOS", "range": "12.2(33)SXJ8" }, { "product": "IOS", "range": "12.2(33)SXJ9" }, { "product": "IOS", "range": "12.2(33)SXJ10" }, { "product": "IOS", "range": "15.1(1)SG" }, { "product": "IOS", "range": "15.1(2)SG" }, { "product": "IOS", "range": "15.1(1)SG1" }, { "product": "IOS", "range": "15.1(1)SG2" }, { "product": "IOS", "range": "15.1(2)SG1" }, { "product": "IOS", "range": "15.1(2)SG2" }, { "product": "IOS", "range": "15.1(2)SG3" }, { "product": "IOS", "range": "15.1(2)SG4" }, { "product": "IOS", "range": "15.1(2)SG5" }, { "product": "IOS", "range": "15.1(2)SG6" }, { "product": "IOS", "range": "15.1(2)SG7" }, { "product": "IOS", "range": "15.1(2)SG8" }, { "product": "IOS", "range": "15.2(4)M" }, { "product": "IOS", "range": "15.2(4)M1" }, { "product": "IOS", "range": "15.2(4)M2" }, { "product": "IOS", "range": "15.2(4)M4" }, { "product": "IOS", "range": "15.2(4)M3" }, { "product": "IOS", "range": "15.2(4)M5" }, { "product": "IOS", "range": "15.2(4)M8" }, { "product": "IOS", "range": "15.2(4)M10" }, { "product": "IOS", "range": "15.2(4)M7" }, { "product": "IOS", "range": "15.2(4)M6" }, { "product": "IOS", "range": "15.2(4)M9" }, { "product": "IOS", "range": "15.2(4)M6a" }, { "product": "IOS", "range": "15.2(4)M11" }, { "product": "IOS", "range": "15.0(2)SG" }, { "product": "IOS", "range": "15.0(2)SG1" }, { "product": "IOS", "range": "15.0(2)SG2" }, { "product": "IOS", "range": "15.0(2)SG3" }, { "product": "IOS", "range": "15.0(2)SG4" }, { "product": "IOS", "range": "15.0(2)SG5" }, { "product": "IOS", "range": "15.0(2)SG6" }, { "product": "IOS", "range": "15.0(2)SG7" }, { "product": "IOS", "range": "15.0(2)SG8" }, { "product": "IOS", "range": "15.0(2)SG9" }, { "product": "IOS", "range": "15.0(2)SG10" }, { "product": "IOS", "range": "15.0(2)SG11" }, { "product": "IOS", "range": "15.2(2)GC" }, { "product": "IOS", "range": "15.2(3)GC" }, { "product": "IOS", "range": "15.2(3)GC1" }, { "product": "IOS", "range": "15.2(4)GC" }, { "product": "IOS", "range": "15.2(4)GC1" }, { "product": "IOS", "range": "15.2(4)GC2" }, { "product": "IOS", "range": "15.2(4)GC3" }, { "product": "IOS", "range": "15.1(1)SY" }, { "product": "IOS", "range": "15.1(1)SY1" }, { "product": "IOS", "range": "15.1(2)SY" }, { "product": "IOS", "range": "15.1(2)SY1" }, { "product": "IOS", "range": "15.1(2)SY2" }, { "product": "IOS", "range": "15.1(1)SY2" }, { "product": "IOS", "range": "15.1(1)SY3" }, { "product": "IOS", "range": "15.1(2)SY3" }, { "product": "IOS", "range": "15.1(1)SY4" }, { "product": "IOS", "range": "15.1(2)SY4" }, { "product": "IOS", "range": "15.1(1)SY5" }, { "product": "IOS", "range": "15.1(2)SY5" }, { "product": "IOS", "range": "15.1(2)SY4a" }, { "product": "IOS", "range": "15.1(1)SY6" }, { "product": "IOS", "range": "15.1(2)SY6" }, { "product": "IOS", "range": "15.1(2)SY7" }, { "product": "IOS", "range": "15.1(2)SY8" }, { "product": "IOS", "range": "15.1(2)SY9" }, { "product": "IOS", "range": "15.1(2)SY10" }, { "product": "IOS", "range": "15.1(2)SY11" }, { "product": "IOS", "range": "15.1(2)SY12" }, { "product": "IOS", "range": "15.1(2)SY13" }, { "product": "IOS", "range": "15.1(2)SY14" }, { "product": "IOS", "range": "15.1(2)SY15" }, { "product": "IOS", "range": "15.1(2)SY16" }, { "product": "IOS", "range": "15.4(1)T" }, { "product": "IOS", "range": "15.4(2)T" }, { "product": "IOS", "range": "15.4(1)T2" }, { "product": "IOS", "range": "15.4(1)T1" }, { "product": "IOS", "range": "15.4(1)T3" }, { "product": "IOS", "range": "15.4(2)T1" }, { "product": "IOS", "range": "15.4(2)T3" }, { "product": "IOS", "range": "15.4(2)T2" }, { "product": "IOS", "range": "15.4(1)T4" }, { "product": "IOS", "range": "15.4(2)T4" }, { "product": "IOS", "range": "15.0(2)EA" }, { "product": "IOS", "range": "15.0(2)EA1" }, { "product": "IOS", "range": "15.2(1)E" }, { "product": "IOS", "range": "15.2(2)E" }, { "product": "IOS", "range": "15.2(1)E1" }, { "product": "IOS", "range": "15.2(3)E" }, { "product": "IOS", "range": "15.2(1)E2" }, { "product": "IOS", "range": "15.2(1)E3" }, { "product": "IOS", "range": "15.2(2)E1" }, { "product": "IOS", "range": "15.2(4)E" }, { "product": "IOS", "range": "15.2(3)E1" }, { "product": "IOS", "range": "15.2(2)E2" }, { "product": "IOS", "range": "15.2(2a)E1" }, { "product": "IOS", "range": "15.2(2)E3" }, { "product": "IOS", "range": "15.2(2a)E2" }, { "product": "IOS", "range": "15.2(3)E2" }, { "product": "IOS", "range": "15.2(3a)E" }, { "product": "IOS", "range": "15.2(3)E3" }, { "product": "IOS", "range": "15.2(4)E1" }, { "product": "IOS", "range": "15.2(2)E4" }, { "product": "IOS", "range": "15.2(2)E5" }, { "product": "IOS", "range": "15.2(4)E2" }, { "product": "IOS", "range": "15.2(3)E4" }, { "product": "IOS", "range": "15.2(5)E" }, { "product": "IOS", "range": "15.2(4)E3" }, { "product": "IOS", "range": "15.2(2)E6" }, { "product": "IOS", "range": "15.2(5a)E" }, { "product": "IOS", "range": "15.2(5)E1" }, { "product": "IOS", "range": "15.2(5b)E" }, { "product": "IOS", "range": "15.2(2)E5a" }, { "product": "IOS", "range": "15.2(5c)E" }, { "product": "IOS", "range": "15.2(2)E5b" }, { "product": "IOS", "range": "15.2(5a)E1" }, { "product": "IOS", "range": "15.2(4)E4" }, { "product": "IOS", "range": "15.2(2)E7" }, { "product": "IOS", "range": "15.2(5)E2" }, { "product": "IOS", "range": "15.2(6)E" }, { "product": "IOS", "range": "15.2(4)E5" }, { "product": "IOS", "range": "15.2(5)E2c" }, { "product": "IOS", "range": "15.2(2)E8" }, { "product": "IOS", "range": "15.2(6)E0a" }, { "product": "IOS", "range": "15.2(6)E1" }, { "product": "IOS", "range": "15.2(6)E0c" }, { "product": "IOS", "range": "15.2(4)E6" }, { "product": "IOS", "range": "15.2(6)E2" }, { "product": "IOS", "range": "15.2(2)E9" }, { "product": "IOS", "range": "15.2(4)E7" }, { "product": "IOS", "range": "15.2(7)E" }, { "product": "IOS", "range": "15.2(2)E10" }, { "product": "IOS", "range": "15.2(4)E8" }, { "product": "IOS", "range": "15.2(6)E2a" }, { "product": "IOS", "range": "15.2(6)E2b" }, { "product": "IOS", "range": "15.2(7)E1" }, { "product": "IOS", "range": "15.2(7)E0a" }, { "product": "IOS", "range": "15.2(7)E0b" }, { "product": "IOS", "range": "15.2(7)E0s" }, { "product": "IOS", "range": "15.2(6)E3" }, { "product": "IOS", "range": "15.2(4)E9" }, { "product": "IOS", "range": "15.2(7)E2" }, { "product": "IOS", "range": "15.2(7a)E0b" }, { "product": "IOS", "range": "15.2(4)E10" }, { "product": "IOS", "range": "15.2(7)E3" }, { "product": "IOS", "range": "15.2(7)E1a" }, { "product": "IOS", "range": "15.2(7b)E0b" }, { "product": "IOS", "range": "15.2(7)E2a" }, { "product": "IOS", "range": "15.2(4)E10a" }, { "product": "IOS", "range": "15.2(7)E4" }, { "product": "IOS", "range": "15.2(7)E3k" }, { "product": "IOS", "range": "15.2(8)E" }, { "product": "IOS", "range": "15.2(8)E1" }, { "product": "IOS", "range": "15.2(7)E5" }, { "product": "IOS", "range": "15.2(7)E6" }, { "product": "IOS", "range": "15.2(8)E2" }, { "product": "IOS", "range": "15.2(4)E10d" }, { "product": "IOS", "range": "15.2(7)E7" }, { "product": "IOS", "range": "15.2(8)E3" }, { "product": "IOS", "range": "15.2(7)E8" }, { "product": "IOS", "range": "15.2(8)E4" }, { "product": "IOS", "range": "15.2(7)E9" }, { "product": "IOS", "range": "15.2(8)E5" }, { "product": "IOS", "range": "15.2(8)E6" }, { "product": "IOS", "range": "15.2(7)E10" }, { "product": "IOS", "range": "15.2(7)E11" }, { "product": "IOS", "range": "15.2(8)E7" }, { "product": "IOS", "range": "15.2(7)E12" }, { "product": "IOS", "range": "15.2(2)JB" }, { "product": "IOS", "range": "15.2(2)JB2" }, { "product": "IOS", "range": "15.2(4)JB" }, { "product": "IOS", "range": "15.2(2)JB3" }, { "product": "IOS", "range": "15.2(4)JB1" }, { "product": "IOS", "range": "15.2(4)JB2" }, { "product": "IOS", "range": "15.2(4)JB3" }, { "product": "IOS", "range": "15.2(4)JB3a" }, { "product": "IOS", "range": "15.2(2)JB4" }, { "product": "IOS", "range": "15.2(4)JB4" }, { "product": "IOS", "range": "15.2(4)JB3h" }, { "product": "IOS", "range": "15.2(4)JB3b" }, { "product": "IOS", "range": "15.2(4)JB5" }, { "product": "IOS", "range": "15.2(4)JB6" }, { "product": "IOS", "range": "15.2(2)JB5" }, { "product": "IOS", "range": "15.2(2)JB6" }, { "product": "IOS", "range": "15.2(2)JAX" }, { "product": "IOS", "range": "15.3(3)M" }, { "product": "IOS", "range": "15.3(3)M1" }, { "product": "IOS", "range": "15.3(3)M2" }, { "product": "IOS", "range": "15.3(3)M3" }, { "product": "IOS", "range": "15.3(3)M5" }, { "product": "IOS", "range": "15.3(3)M4" }, { "product": "IOS", "range": "15.3(3)M6" }, { "product": "IOS", "range": "15.3(3)M7" }, { "product": "IOS", "range": "15.3(3)M8" }, { "product": "IOS", "range": "15.3(3)M9" }, { "product": "IOS", "range": "15.3(3)M10" }, { "product": "IOS", "range": "15.3(3)M8a" }, { "product": "IOS", "range": "15.2(4)JN" }, { "product": "IOS", "range": "15.2(1)EY" }, { "product": "IOS", "range": "15.0(2)EJ" }, { "product": "IOS", "range": "15.0(2)EJ1" }, { "product": "IOS", "range": "15.2(1)SY" }, { "product": "IOS", "range": "15.2(1)SY1" }, { "product": "IOS", "range": "15.2(1)SY0a" }, { "product": "IOS", "range": "15.2(1)SY2" }, { "product": "IOS", "range": "15.2(2)SY" }, { "product": "IOS", "range": "15.2(1)SY1a" }, { "product": "IOS", "range": "15.2(2)SY1" }, { "product": "IOS", "range": "15.2(2)SY2" }, { "product": "IOS", "range": "15.2(1)SY3" }, { "product": "IOS", "range": "15.2(1)SY4" }, { "product": "IOS", "range": "15.2(2)SY3" }, { "product": "IOS", "range": "15.2(1)SY5" }, { "product": "IOS", "range": "15.2(1)SY6" }, { "product": "IOS", "range": "15.2(1)SY7" }, { "product": "IOS", "range": "15.2(1)SY8" }, { "product": "IOS", "range": "15.2(5)EX" }, { "product": "IOS", "range": "15.0(2)EK" }, { "product": "IOS", "range": "15.0(2)EK1" }, { "product": "IOS", "range": "15.4(1)CG" }, { "product": "IOS", "range": "15.4(1)CG1" }, { "product": "IOS", "range": "15.4(2)CG" }, { "product": "IOS", "range": "15.5(1)S" }, { "product": "IOS", "range": "15.5(2)S" }, { "product": "IOS", "range": "15.5(1)S1" }, { "product": "IOS", "range": "15.5(3)S" }, { "product": "IOS", "range": "15.5(1)S2" }, { "product": "IOS", "range": "15.5(1)S3" }, { "product": "IOS", "range": "15.5(2)S1" }, { "product": "IOS", "range": "15.5(2)S2" }, { "product": "IOS", "range": "15.5(3)S1" }, { "product": "IOS", "range": "15.5(3)S1a" }, { "product": "IOS", "range": "15.5(2)S3" }, { "product": "IOS", "range": "15.5(3)S2" }, { "product": "IOS", "range": "15.5(3)S0a" }, { "product": "IOS", "range": "15.5(3)S3" }, { "product": "IOS", "range": "15.5(1)S4" }, { "product": "IOS", "range": "15.5(2)S4" }, { "product": "IOS", "range": "15.5(3)S4" }, { "product": "IOS", "range": "15.5(3)S5" }, { "product": "IOS", "range": "15.5(3)S6" }, { "product": "IOS", "range": "15.5(3)S6a" }, { "product": "IOS", "range": "15.5(3)S7" }, { "product": "IOS", "range": "15.5(3)S6b" }, { "product": "IOS", "range": "15.5(3)S8" }, { "product": "IOS", "range": "15.5(3)S9" }, { "product": "IOS", "range": "15.5(3)S10" }, { "product": "IOS", "range": "15.5(3)S9a" }, { "product": "IOS", "range": "15.5(1)T" }, { "product": "IOS", "range": "15.5(1)T1" }, { "product": "IOS", "range": "15.5(2)T" }, { "product": "IOS", "range": "15.5(1)T2" }, { "product": "IOS", "range": "15.5(1)T3" }, { "product": "IOS", "range": "15.5(2)T1" }, { "product": "IOS", "range": "15.5(2)T2" }, { "product": "IOS", "range": "15.5(2)T3" }, { "product": "IOS", "range": "15.5(2)T4" }, { "product": "IOS", "range": "15.5(1)T4" }, { "product": "IOS", "range": "15.2(2)EA" }, { "product": "IOS", "range": "15.2(2)EA1" }, { "product": "IOS", "range": "15.2(2)EA2" }, { "product": "IOS", "range": "15.2(3)EA" }, { "product": "IOS", "range": "15.2(4)EA" }, { "product": "IOS", "range": "15.2(4)EA1" }, { "product": "IOS", "range": "15.2(2)EA3" }, { "product": "IOS", "range": "15.2(4)EA3" }, { "product": "IOS", "range": "15.2(5)EA" }, { "product": "IOS", "range": "15.2(4)EA4" }, { "product": "IOS", "range": "15.2(4)EA5" }, { "product": "IOS", "range": "15.2(4)EA6" }, { "product": "IOS", "range": "15.2(4)EA7" }, { "product": "IOS", "range": "15.2(4)EA8" }, { "product": "IOS", "range": "15.2(4)EA9" }, { "product": "IOS", "range": "15.2(4)EA9a" }, { "product": "IOS", "range": "15.3(3)JN3" }, { "product": "IOS", "range": "15.3(3)JN4" }, { "product": "IOS", "range": "15.3(3)JN7" }, { "product": "IOS", "range": "15.3(3)JN8" }, { "product": "IOS", "range": "15.3(3)JN9" }, { "product": "IOS", "range": "15.5(3)M" }, { "product": "IOS", "range": "15.5(3)M1" }, { "product": "IOS", "range": "15.5(3)M0a" }, { "product": "IOS", "range": "15.5(3)M2" }, { "product": "IOS", "range": "15.5(3)M3" }, { "product": "IOS", "range": "15.5(3)M4" }, { "product": "IOS", "range": "15.5(3)M4a" }, { "product": "IOS", "range": "15.5(3)M5" }, { "product": "IOS", "range": "15.5(3)M6" }, { "product": "IOS", "range": "15.5(3)M7" }, { "product": "IOS", "range": "15.5(3)M6a" }, { "product": "IOS", "range": "15.5(3)M8" }, { "product": "IOS", "range": "15.5(3)M9" }, { "product": "IOS", "range": "15.5(3)M10" }, { "product": "IOS", "range": "15.3(3)JA1m" }, { "product": "IOS", "range": "15.3(3)JA1" }, { "product": "IOS", "range": "15.3(3)JA4" }, { "product": "IOS", "range": "15.3(3)JA5" }, { "product": "IOS", "range": "15.3(3)JA6" }, { "product": "IOS", "range": "15.3(3)JA7" }, { "product": "IOS", "range": "15.3(3)JA8" }, { "product": "IOS", "range": "15.3(3)JA10" }, { "product": "IOS", "range": "15.3(3)JA11" }, { "product": "IOS", "range": "15.3(3)JA12" }, { "product": "IOS", "range": "15.3(3)JAA" }, { "product": "IOS", "range": "15.3(3)JAA11" }, { "product": "IOS", "range": "15.3(3)JAA12" }, { "product": "IOS", "range": "15.3(3)JAB" }, { "product": "IOS", "range": "15.3(3)JB" }, { "product": "IOS", "range": "15.5(3)SN" }, { "product": "IOS", "range": "15.0(2)SQD" }, { "product": "IOS", "range": "15.0(2)SQD1" }, { "product": "IOS", "range": "15.0(2)SQD2" }, { "product": "IOS", "range": "15.0(2)SQD3" }, { "product": "IOS", "range": "15.0(2)SQD4" }, { "product": "IOS", "range": "15.0(2)SQD5" }, { "product": "IOS", "range": "15.0(2)SQD6" }, { "product": "IOS", "range": "15.0(2)SQD7" }, { "product": "IOS", "range": "15.0(2)SQD8" }, { "product": "IOS", "range": "15.6(1)S" }, { "product": "IOS", "range": "15.6(2)S" }, { "product": "IOS", "range": "15.6(2)S1" }, { "product": "IOS", "range": "15.6(1)S1" }, { "product": "IOS", "range": "15.6(1)S2" }, { "product": "IOS", "range": "15.6(2)S2" }, { "product": "IOS", "range": "15.6(1)S3" }, { "product": "IOS", "range": "15.6(2)S3" }, { "product": "IOS", "range": "15.6(1)S4" }, { "product": "IOS", "range": "15.6(2)S4" }, { "product": "IOS", "range": "15.6(1)T" }, { "product": "IOS", "range": "15.6(2)T" }, { "product": "IOS", "range": "15.6(1)T0a" }, { "product": "IOS", "range": "15.6(1)T1" }, { "product": "IOS", "range": "15.6(2)T1" }, { "product": "IOS", "range": "15.6(1)T2" }, { "product": "IOS", "range": "15.6(2)T2" }, { "product": "IOS", "range": "15.6(1)T3" }, { "product": "IOS", "range": "15.6(2)T3" }, { "product": "IOS", "range": "15.3(3)JNB" }, { "product": "IOS", "range": "15.3(3)JNB1" }, { "product": "IOS", "range": "15.3(3)JNB2" }, { "product": "IOS", "range": "15.3(3)JNB3" }, { "product": "IOS", "range": "15.3(3)JNB4" }, { "product": "IOS", "range": "15.3(3)JNB6" }, { "product": "IOS", "range": "15.3(3)JNB5" }, { "product": "IOS", "range": "15.3(3)JAX" }, { "product": "IOS", "range": "15.3(3)JAX1" }, { "product": "IOS", "range": "15.3(3)JAX2" }, { "product": "IOS", "range": "15.3(3)JBB" }, { "product": "IOS", "range": "15.3(3)JBB1" }, { "product": "IOS", "range": "15.3(3)JBB2" }, { "product": "IOS", "range": "15.3(3)JBB4" }, { "product": "IOS", "range": "15.3(3)JBB5" }, { "product": "IOS", "range": "15.3(3)JBB6" }, { "product": "IOS", "range": "15.3(3)JBB8" }, { "product": "IOS", "range": "15.3(3)JBB6a" }, { "product": "IOS", "range": "15.3(3)JC" }, { "product": "IOS", "range": "15.3(3)JC1" }, { "product": "IOS", "range": "15.3(3)JC2" }, { "product": "IOS", "range": "15.3(3)JC3" }, { "product": "IOS", "range": "15.3(3)JC4" }, { "product": "IOS", "range": "15.3(3)JC5" }, { "product": "IOS", "range": "15.3(3)JC6" }, { "product": "IOS", "range": "15.3(3)JC8" }, { "product": "IOS", "range": "15.3(3)JC9" }, { "product": "IOS", "range": "15.3(3)JC14" }, { "product": "IOS", "range": "15.3(1)SY" }, { "product": "IOS", "range": "15.3(1)SY1" }, { "product": "IOS", "range": "15.3(1)SY2" }, { "product": "IOS", "range": "15.3(3)JNC" }, { "product": "IOS", "range": "15.3(3)JNC1" }, { "product": "IOS", "range": "15.3(3)JNC4" }, { "product": "IOS", "range": "15.3(3)JNP" }, { "product": "IOS", "range": "15.3(3)JNP1" }, { "product": "IOS", "range": "15.3(3)JNP3" }, { "product": "IOS", "range": "15.6(2)SP" }, { "product": "IOS", "range": "15.6(2)SP1" }, { "product": "IOS", "range": "15.6(2)SP2" }, { "product": "IOS", "range": "15.6(2)SP3" }, { "product": "IOS", "range": "15.6(2)SP4" }, { "product": "IOS", "range": "15.6(2)SP5" }, { "product": "IOS", "range": "15.6(2)SP6" }, { "product": "IOS", "range": "15.6(2)SP7" }, { "product": "IOS", "range": "15.6(2)SP8" }, { "product": "IOS", "range": "15.6(2)SP9" }, { "product": "IOS", "range": "15.6(2)SN" }, { "product": "IOS", "range": "15.3(3)JPB" }, { "product": "IOS", "range": "15.3(3)JPB1" }, { "product": "IOS", "range": "15.3(3)JD" }, { "product": "IOS", "range": "15.3(3)JD2" }, { "product": "IOS", "range": "15.3(3)JD3" }, { "product": "IOS", "range": "15.3(3)JD4" }, { "product": "IOS", "range": "15.3(3)JD5" }, { "product": "IOS", "range": "15.3(3)JD6" }, { "product": "IOS", "range": "15.3(3)JD7" }, { "product": "IOS", "range": "15.3(3)JD8" }, { "product": "IOS", "range": "15.3(3)JD9" }, { "product": "IOS", "range": "15.3(3)JD11" }, { "product": "IOS", "range": "15.3(3)JD13" }, { "product": "IOS", "range": "15.3(3)JD14" }, { "product": "IOS", "range": "15.3(3)JD16" }, { "product": "IOS", "range": "15.3(3)JD17" }, { "product": "IOS", "range": "15.6(3)M" }, { "product": "IOS", "range": "15.6(3)M1" }, { "product": "IOS", "range": "15.6(3)M0a" }, { "product": "IOS", "range": "15.6(3)M1b" }, { "product": "IOS", "range": "15.6(3)M2" }, { "product": "IOS", "range": "15.6(3)M2a" }, { "product": "IOS", "range": "15.6(3)M3" }, { "product": "IOS", "range": "15.6(3)M3a" }, { "product": "IOS", "range": "15.6(3)M4" }, { "product": "IOS", "range": "15.6(3)M5" }, { "product": "IOS", "range": "15.6(3)M6" }, { "product": "IOS", "range": "15.6(3)M7" }, { "product": "IOS", "range": "15.6(3)M6a" }, { "product": "IOS", "range": "15.6(3)M6b" }, { "product": "IOS", "range": "15.6(3)M8" }, { "product": "IOS", "range": "15.6(3)M9" }, { "product": "IOS", "range": "15.2(4)EC1" }, { "product": "IOS", "range": "15.2(4)EC2" }, { "product": "IOS", "range": "15.3(3)JPC" }, { "product": "IOS", "range": "15.3(3)JPC1" }, { "product": "IOS", "range": "15.3(3)JPC2" }, { "product": "IOS", "range": "15.3(3)JPC3" }, { "product": "IOS", "range": "15.3(3)JPC5" }, { "product": "IOS", "range": "15.3(3)JND" }, { "product": "IOS", "range": "15.3(3)JND1" }, { "product": "IOS", "range": "15.3(3)JND2" }, { "product": "IOS", "range": "15.3(3)JND3" }, { "product": "IOS", "range": "15.4(1)SY" }, { "product": "IOS", "range": "15.4(1)SY1" }, { "product": "IOS", "range": "15.4(1)SY2" }, { "product": "IOS", "range": "15.4(1)SY3" }, { "product": "IOS", "range": "15.4(1)SY4" }, { "product": "IOS", "range": "15.3(3)JE" }, { "product": "IOS", "range": "15.3(3)JPD" }, { "product": "IOS", "range": "15.3(3)JDA7" }, { "product": "IOS", "range": "15.3(3)JDA8" }, { "product": "IOS", "range": "15.3(3)JDA9" }, { "product": "IOS", "range": "15.3(3)JDA11" }, { "product": "IOS", "range": "15.3(3)JDA13" }, { "product": "IOS", "range": "15.3(3)JDA14" }, { "product": "IOS", "range": "15.3(3)JDA16" }, { "product": "IOS", "range": "15.3(3)JDA17" }, { "product": "IOS", "range": "15.5(1)SY" }, { "product": "IOS", "range": "15.5(1)SY1" }, { "product": "IOS", "range": "15.5(1)SY2" }, { "product": "IOS", "range": "15.5(1)SY3" }, { "product": "IOS", "range": "15.5(1)SY4" }, { "product": "IOS", "range": "15.5(1)SY5" }, { "product": "IOS", "range": "15.5(1)SY6" }, { "product": "IOS", "range": "15.5(1)SY7" }, { "product": "IOS", "range": "15.5(1)SY8" }, { "product": "IOS", "range": "15.5(1)SY9" }, { "product": "IOS", "range": "15.5(1)SY10" }, { "product": "IOS", "range": "15.5(1)SY11" }, { "product": "IOS", "range": "15.5(1)SY12" }, { "product": "IOS", "range": "15.5(1)SY13" }, { "product": "IOS", "range": "15.5(1)SY14" }, { "product": "IOS", "range": "15.5(1)SY15" }, { "product": "IOS", "range": "15.3(3)JF" }, { "product": "IOS", "range": "15.3(3)JF1" }, { "product": "IOS", "range": "15.3(3)JF2" }, { "product": "IOS", "range": "15.3(3)JF4" }, { "product": "IOS", "range": "15.3(3)JF5" }, { "product": "IOS", "range": "15.3(3)JF6" }, { "product": "IOS", "range": "15.3(3)JF7" }, { "product": "IOS", "range": "15.3(3)JF8" }, { "product": "IOS", "range": "15.3(3)JF9" }, { "product": "IOS", "range": "15.3(3)JF10" }, { "product": "IOS", "range": "15.3(3)JF11" }, { "product": "IOS", "range": "15.3(3)JF12" }, { "product": "IOS", "range": "15.3(3)JF12i" }, { "product": "IOS", "range": "15.3(3)JF14" }, { "product": "IOS", "range": "15.3(3)JF14i" }, { "product": "IOS", "range": "15.3(3)JF15" }, { "product": "IOS", "range": "15.3(3)JCA7" }, { "product": "IOS", "range": "15.3(3)JCA8" }, { "product": "IOS", "range": "15.3(3)JCA9" }, { "product": "IOS", "range": "15.7(3)M" }, { "product": "IOS", "range": "15.7(3)M1" }, { "product": "IOS", "range": "15.7(3)M0a" }, { "product": "IOS", "range": "15.7(3)M3" }, { "product": "IOS", "range": "15.7(3)M2" }, { "product": "IOS", "range": "15.7(3)M4" }, { "product": "IOS", "range": "15.7(3)M5" }, { "product": "IOS", "range": "15.7(3)M4a" }, { "product": "IOS", "range": "15.7(3)M4b" }, { "product": "IOS", "range": "15.7(3)M6" }, { "product": "IOS", "range": "15.7(3)M7" }, { "product": "IOS", "range": "15.7(3)M8" }, { "product": "IOS", "range": "15.7(3)M9" }, { "product": "IOS", "range": "15.3(3)JG" }, { "product": "IOS", "range": "15.3(3)JG1" }, { "product": "IOS", "range": "15.3(3)JH" }, { "product": "IOS", "range": "15.3(3)JH1" }, { "product": "IOS", "range": "15.3(3)JI1" }, { "product": "IOS", "range": "15.3(3)JI3" }, { "product": "IOS", "range": "15.3(3)JI4" }, { "product": "IOS", "range": "15.3(3)JI5" }, { "product": "IOS", "range": "15.3(3)JI6" }, { "product": "IOS", "range": "15.8(3)M" }, { "product": "IOS", "range": "15.8(3)M1" }, { "product": "IOS", "range": "15.8(3)M0a" }, { "product": "IOS", "range": "15.8(3)M0b" }, { "product": "IOS", "range": "15.8(3)M2" }, { "product": "IOS", "range": "15.8(3)M1a" }, { "product": "IOS", "range": "15.8(3)M3" }, { "product": "IOS", "range": "15.8(3)M2a" }, { "product": "IOS", "range": "15.8(3)M4" }, { "product": "IOS", "range": "15.8(3)M3a" }, { "product": "IOS", "range": "15.8(3)M3b" }, { "product": "IOS", "range": "15.8(3)M5" }, { "product": "IOS", "range": "15.8(3)M6" }, { "product": "IOS", "range": "15.8(3)M7" }, { "product": "IOS", "range": "15.8(3)M8" }, { "product": "IOS", "range": "15.8(3)M9" }, { "product": "IOS", "range": "15.9(3)M" }, { "product": "IOS", "range": "15.9(3)M1" }, { "product": "IOS", "range": "15.9(3)M0a" }, { "product": "IOS", "range": "15.9(3)M2" }, { "product": "IOS", "range": "15.9(3)M3" }, { "product": "IOS", "range": "15.9(3)M2a" }, { "product": "IOS", "range": "15.9(3)M3a" }, { "product": "IOS", "range": "15.9(3)M4" }, { "product": "IOS", "range": "15.9(3)M3b" }, { "product": "IOS", "range": "15.9(3)M5" }, { "product": "IOS", "range": "15.9(3)M4a" }, { "product": "IOS", "range": "15.9(3)M6" }, { "product": "IOS", "range": "15.9(3)M7" }, { "product": "IOS", "range": "15.9(3)M6a" }, { "product": "IOS", "range": "15.9(3)M6b" }, { "product": "IOS", "range": "15.9(3)M8" }, { "product": "IOS", "range": "15.9(3)M7a" }, { "product": "IOS", "range": "15.9(3)M9" }, { "product": "IOS", "range": "15.9(3)M8b" }, { "product": "IOS", "range": "15.9(3)M10" }, { "product": "IOS", "range": "15.9(3)M11" }, { "product": "IOS", "range": "15.3(3)JK" }, { "product": "IOS", "range": "15.3(3)JK1" }, { "product": "IOS", "range": "15.3(3)JK2" }, { "product": "IOS", "range": "15.3(3)JK3" }, { "product": "IOS", "range": "15.3(3)JK2a" }, { "product": "IOS", "range": "15.3(3)JK1t" }, { "product": "IOS", "range": "15.3(3)JK4" }, { "product": "IOS", "range": "15.3(3)JK5" }, { "product": "IOS", "range": "15.3(3)JK6" }, { "product": "IOS", "range": "15.3(3)JK7" }, { "product": "IOS", "range": "15.3(3)JK8" }, { "product": "IOS", "range": "15.3(3)JK8a" }, { "product": "IOS", "range": "15.3(3)JK8b" }, { "product": "IOS", "range": "15.3(3)JK9" }, { "product": "IOS", "range": "15.3(3)JK10" }, { "product": "IOS", "range": "15.3(3)JK11" }, { "product": "IOS", "range": "15.3(3)JJ" }, { "product": "IOS", "range": "15.3(3)JJ1" }, { "product": "IOS", "range": "15.3(3)JPI1" }, { "product": "IOS", "range": "15.3(3)JPI4" }, { "product": "IOS", "range": "15.3(3)JPI1t" }, { "product": "IOS", "range": "15.3(3)JPI5" }, { "product": "IOS", "range": "15.3(3)JPI7" }, { "product": "IOS", "range": "15.3(3)JPI6a" }, { "product": "IOS", "range": "15.3(3)JPI8a" }, { "product": "IOS", "range": "15.3(3)JPI9" }, { "product": "IOS", "range": "15.3(3)JPI10" }, { "product": "IOS", "range": "15.3(3)JPJ2" }, { "product": "IOS", "range": "15.3(3)JPJ3" }, { "product": "IOS", "range": "15.3(3)JPJ2t" }, { "product": "IOS", "range": "15.3(3)JPJ3a" }, { "product": "IOS", "range": "15.3(3)JPJ4" }, { "product": "IOS", "range": "15.3(3)JPJ5" }, { "product": "IOS", "range": "15.3(3)JPJ6" }, { "product": "IOS", "range": "15.3(3)JPJ7" }, { "product": "IOS", "range": "15.3(3)JPJ7c" }, { "product": "IOS", "range": "15.3(3)JPJ8a" }, { "product": "IOS", "range": "15.3(3)JPJ9" }, { "product": "IOS", "range": "15.3(3)JPJ10" }, { "product": "IOS", "range": "15.3(3)JPJ11" }, { "product": "IOS", "range": "15.3(3)JPK" }, { "product": "IOS", "range": "15.3(3)JPK1" }, { "product": "IOS", "range": "15.3(3)JPK2" }, { "product": "IOS", "range": "15.3(3)JPK3" }, { "product": "IOS", "range": "15.3(3)JPK4" }, { "product": "IOS", "range": "15.3(3)JPK5" }, { "product": "IOS", "range": "15.3(3)JPK6" }, { "product": "IOS", "range": "15.3(3)JPK7" }, { "product": "IOS", "range": "15.3(3)JPK8" }, { "product": "IOS", "range": "15.3(3)JPK9" }, { "product": "IOS", "range": "15.3(3)JPL" }, { "product": "IOS", "range": "15.3(3)JPM" }, { "product": "IOS", "range": "15.3(3)JPN" }, { "product": "IOS", "range": "15.3(3)JPN1" }, { "product": "IOS", "range": "15.3(3)JPN2" }, { "product": "IOS", "range": "15.3(3)JPN3" }, { "product": "IOS", "range": "15.3(3)JPN4" }, { "product": "IOS", "range": "15.3(3)JPN5" }, { "product": "IOS", "range": "15.3(3)JPN6" }, { "product": "IOS", "range": "15.3(3)JPO" }, { "product": "IOS", "range": "15.3(3)JPP" }, { "product": "IOS", "range": "15.3(3)JPQ" }, { "product": "IOS", "range": "15.3(3)JPQ1" }, { "product": "IOS", "range": "15.3(3)JPQ2" }, { "product": "IOS", "range": "15.3(3)JPQ3" }, { "product": "IOS", "range": "15.3(3)JPQ4" }, { "product": "IOS", "range": "15.3(3)JPQ5" }, { "product": "IOS", "range": "15.3(3)JPR" }, { "product": "IOS", "range": "15.3(3)JPS" }, { "product": "IOS", "range": "15.3(3)JPT" }, { "product": "IOS", "range": "15.3(3)JPT1" }, { "product": "IOS", "range": "15.3(3)JPT2" }, { "product": "Cisco IOS XE Software", "range": "3.5.0E" }, { "product": "Cisco IOS XE Software", "range": "3.5.1E" }, { "product": "Cisco IOS XE Software", "range": "3.5.2E" }, { "product": "Cisco IOS XE Software", "range": "3.5.3E" }, { "product": "Cisco IOS XE Software", "range": "3.6.0E" }, { "product": "Cisco IOS XE Software", "range": "3.6.1E" }, { "product": "Cisco IOS XE Software", "range": "3.6.2aE" }, { "product": "Cisco IOS XE Software", "range": "3.6.2E" }, { "product": "Cisco IOS XE Software", "range": "3.6.3E" }, { "product": "Cisco IOS XE Software", "range": "3.6.4E" }, { "product": "Cisco IOS XE Software", "range": "3.6.5E" }, { "product": "Cisco IOS XE Software", "range": "3.6.6E" }, { "product": "Cisco IOS XE Software", "range": "3.6.5aE" }, { "product": "Cisco IOS XE Software", "range": "3.6.7E" }, { "product": "Cisco IOS XE Software", "range": "3.6.8E" }, { "product": "Cisco IOS XE Software", "range": "3.6.7bE" }, { "product": "Cisco IOS XE Software", "range": "3.6.9E" }, { "product": "Cisco IOS XE Software", "range": "3.6.10E" }, { "product": "Cisco IOS XE Software", "range": "3.14.0S" }, { "product": "Cisco IOS XE Software", "range": "3.14.1S" }, { "product": "Cisco IOS XE Software", "range": "3.14.2S" }, { "product": "Cisco IOS XE Software", "range": "3.14.3S" }, { "product": "Cisco IOS XE Software", "range": "3.14.4S" }, { "product": "Cisco IOS XE Software", "range": "3.15.0S" }, { "product": "Cisco IOS XE Software", "range": "3.15.1S" }, { "product": "Cisco IOS XE Software", "range": "3.15.2S" }, { "product": "Cisco IOS XE Software", "range": "3.15.1cS" }, { "product": "Cisco IOS XE Software", "range": "3.15.3S" }, { "product": "Cisco IOS XE Software", "range": "3.15.4S" }, { "product": "Cisco IOS XE Software", "range": "3.7.0E" }, { "product": "Cisco IOS XE Software", "range": "3.7.1E" }, { "product": "Cisco IOS XE Software", "range": "3.7.2E" }, { "product": "Cisco IOS XE Software", "range": "3.7.3E" }, { "product": "Cisco IOS XE Software", "range": "3.7.4E" }, { "product": "Cisco IOS XE Software", "range": "3.7.5E" }, { "product": "Cisco IOS XE Software", "range": "3.5.0SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.1SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.2SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.3SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.4SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.5SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.6SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.7SQ" }, { "product": "Cisco IOS XE Software", "range": "3.5.8SQ" }, { "product": "Cisco IOS XE Software", "range": "3.16.0S" }, { "product": "Cisco IOS XE Software", "range": "3.16.1S" }, { "product": "Cisco IOS XE Software", "range": "3.16.1aS" }, { "product": "Cisco IOS XE Software", "range": "3.16.2S" }, { "product": "Cisco IOS XE Software", "range": "3.16.2aS" }, { "product": "Cisco IOS XE Software", "range": "3.16.0cS" }, { "product": "Cisco IOS XE Software", "range": "3.16.3S" }, { "product": "Cisco IOS XE Software", "range": "3.16.2bS" }, { "product": "Cisco IOS XE Software", "range": "3.16.3aS" }, { "product": "Cisco IOS XE Software", "range": "3.16.4S" }, { "product": "Cisco IOS XE Software", "range": "3.16.4aS" }, { "product": "Cisco IOS XE Software", "range": "3.16.4bS" }, { "product": "Cisco IOS XE Software", "range": "3.16.5S" }, { "product": "Cisco IOS XE Software", "range": "3.16.4dS" }, { "product": "Cisco IOS XE Software", "range": "3.16.6S" }, { "product": "Cisco IOS XE Software", "range": "3.16.7S" }, { "product": "Cisco IOS XE Software", "range": "3.16.6bS" }, { "product": "Cisco IOS XE Software", "range": "3.16.7aS" }, { "product": "Cisco IOS XE Software", "range": "3.16.7bS" }, { "product": "Cisco IOS XE Software", "range": "3.16.8S" }, { "product": "Cisco IOS XE Software", "range": "3.16.9S" }, { "product": "Cisco IOS XE Software", "range": "3.16.10S" }, { "product": "Cisco IOS XE Software", "range": "3.17.0S" }, { "product": "Cisco IOS XE Software", "range": "3.17.1S" }, { "product": "Cisco IOS XE Software", "range": "3.17.2S" }, { "product": "Cisco IOS XE Software", "range": "3.17.1aS" }, { "product": "Cisco IOS XE Software", "range": "3.17.3S" }, { "product": "Cisco IOS XE Software", "range": "3.17.4S" }, { "product": "Cisco IOS XE Software", "range": "3.8.0E" }, { "product": "Cisco IOS XE Software", "range": "3.8.1E" }, { "product": "Cisco IOS XE Software", "range": "3.8.2E" }, { "product": "Cisco IOS XE Software", "range": "3.8.3E" }, { "product": "Cisco IOS XE Software", "range": "3.8.4E" }, { "product": "Cisco IOS XE Software", "range": "3.8.5E" }, { "product": "Cisco IOS XE Software", "range": "3.8.5aE" }, { "product": "Cisco IOS XE Software", "range": "3.8.6E" }, { "product": "Cisco IOS XE Software", "range": "3.8.7E" }, { "product": "Cisco IOS XE Software", "range": "3.8.8E" }, { "product": "Cisco IOS XE Software", "range": "3.8.9E" }, { "product": "Cisco IOS XE Software", "range": "3.8.10E" }, { "product": "Cisco IOS XE Software", "range": "3.18.0aS" }, { "product": "Cisco IOS XE Software", "range": "3.18.0S" }, { "product": "Cisco IOS XE Software", "range": "3.18.1S" }, { "product": "Cisco IOS XE Software", "range": "3.18.2S" }, { "product": "Cisco IOS XE Software", "range": "3.18.3S" }, { "product": "Cisco IOS XE Software", "range": "3.18.4S" }, { "product": "Cisco IOS XE Software", "range": "3.18.0SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.1SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.1aSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.1bSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.1cSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.2SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.2aSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.3SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.4SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.3aSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.3bSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.5SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.6SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.7SP" }, { "product": "Cisco IOS XE Software", "range": "3.18.8aSP" }, { "product": "Cisco IOS XE Software", "range": "3.18.9SP" }, { "product": "Cisco IOS XE Software", "range": "3.9.0E" }, { "product": "Cisco IOS XE Software", "range": "3.9.1E" }, { "product": "Cisco IOS XE Software", "range": "3.9.2E" }, { "product": "Cisco IOS XE Software", "range": "16.6.1" }, { "product": "Cisco IOS XE Software", "range": "16.6.2" }, { "product": "Cisco IOS XE Software", "range": "16.6.3" }, { "product": "Cisco IOS XE Software", "range": "16.6.4" }, { "product": "Cisco IOS XE Software", "range": "16.6.5" }, { "product": "Cisco IOS XE Software", "range": "16.6.4a" }, { "product": "Cisco IOS XE Software", "range": "16.6.5a" }, { "product": "Cisco IOS XE Software", "range": "16.6.6" }, { "product": "Cisco IOS XE Software", "range": "16.6.7" }, { "product": "Cisco IOS XE Software", "range": "16.6.8" }, { "product": "Cisco IOS XE Software", "range": "16.6.9" }, { "product": "Cisco IOS XE Software", "range": "16.6.10" }, { "product": "Cisco IOS XE Software", "range": "16.7.1" }, { "product": "Cisco IOS XE Software", "range": "16.7.1a" }, { "product": "Cisco IOS XE Software", "range": "16.7.1b" }, { "product": "Cisco IOS XE Software", "range": "16.7.2" }, { "product": "Cisco IOS XE Software", "range": "16.7.3" }, { "product": "Cisco IOS XE Software", "range": "16.7.4" }, { "product": "Cisco IOS XE Software", "range": "16.8.1" }, { "product": "Cisco IOS XE Software", "range": "16.8.1a" }, { "product": "Cisco IOS XE Software", "range": "16.8.1b" }, { "product": "Cisco IOS XE Software", "range": "16.8.1s" }, { "product": "Cisco IOS XE Software", "range": "16.8.1c" }, { "product": "Cisco IOS XE Software", "range": "16.8.1d" }, { "product": "Cisco IOS XE Software", "range": "16.8.2" }, { "product": "Cisco IOS XE Software", "range": "16.8.1e" }, { "product": "Cisco IOS XE Software", "range": "16.8.3" }, { "product": "Cisco IOS XE Software", "range": "16.9.1" }, { "product": "Cisco IOS XE Software", "range": "16.9.2" }, { "product": "Cisco IOS XE Software", "range": "16.9.1a" }, { "product": "Cisco IOS XE Software", "range": "16.9.1b" }, { "product": "Cisco IOS XE Software", "range": "16.9.1s" }, { "product": "Cisco IOS XE Software", "range": "16.9.3" }, { "product": "Cisco IOS XE Software", "range": "16.9.4" }, { "product": "Cisco IOS XE Software", "range": "16.9.3a" }, { "product": "Cisco IOS XE Software", "range": "16.9.5" }, { "product": "Cisco IOS XE Software", "range": "16.9.5f" }, { "product": "Cisco IOS XE Software", "range": "16.9.6" }, { "product": "Cisco IOS XE Software", "range": "16.9.7" }, { "product": "Cisco IOS XE Software", "range": "16.9.8" }, { "product": "Cisco IOS XE Software", "range": "16.10.1" }, { "product": "Cisco IOS XE Software", "range": "16.10.1a" }, { "product": "Cisco IOS XE Software", "range": "16.10.1b" }, { "product": "Cisco IOS XE Software", "range": "16.10.1s" }, { "product": "Cisco IOS XE Software", "range": "16.10.1c" }, { "product": "Cisco IOS XE Software", "range": "16.10.1e" }, { "product": "Cisco IOS XE Software", "range": "16.10.1d" }, { "product": "Cisco IOS XE Software", "range": "16.10.2" }, { "product": "Cisco IOS XE Software", "range": "16.10.1f" }, { "product": "Cisco IOS XE Software", "range": "16.10.1g" }, { "product": "Cisco IOS XE Software", "range": "16.10.3" }, { "product": "Cisco IOS XE Software", "range": "3.10.0E" }, { "product": "Cisco IOS XE Software", "range": "3.10.1E" }, { "product": "Cisco IOS XE Software", "range": "3.10.0cE" }, { "product": "Cisco IOS XE Software", "range": "3.10.2E" }, { "product": "Cisco IOS XE Software", "range": "3.10.3E" }, { "product": "Cisco IOS XE Software", "range": "16.11.1" }, { "product": "Cisco IOS XE Software", "range": "16.11.1a" }, { "product": "Cisco IOS XE Software", "range": "16.11.1b" }, { "product": "Cisco IOS XE Software", "range": "16.11.2" }, { "product": "Cisco IOS XE Software", "range": "16.11.1s" }, { "product": "Cisco IOS XE Software", "range": "16.12.1" }, { "product": "Cisco IOS XE Software", "range": "16.12.1s" }, { "product": "Cisco IOS XE Software", "range": "16.12.1a" }, { "product": "Cisco IOS XE Software", "range": "16.12.1c" }, { "product": "Cisco IOS XE Software", "range": "16.12.1w" }, { "product": "Cisco IOS XE Software", "range": "16.12.2" }, { "product": "Cisco IOS XE Software", "range": "16.12.1y" }, { "product": "Cisco IOS XE Software", "range": "16.12.2a" }, { "product": "Cisco IOS XE Software", "range": "16.12.3" }, { "product": "Cisco IOS XE Software", "range": "16.12.8" }, { "product": "Cisco IOS XE Software", "range": "16.12.2s" }, { "product": "Cisco IOS XE Software", "range": "16.12.1x" }, { "product": "Cisco IOS XE Software", "range": "16.12.1t" }, { "product": "Cisco IOS XE Software", "range": "16.12.4" }, { "product": "Cisco IOS XE Software", "range": "16.12.3s" }, { "product": "Cisco IOS XE Software", "range": "16.12.3a" }, { "product": "Cisco IOS XE Software", "range": "16.12.4a" }, { "product": "Cisco IOS XE Software", "range": "16.12.5" }, { "product": "Cisco IOS XE Software", "range": "16.12.6" }, { "product": "Cisco IOS XE Software", "range": "16.12.1z1" }, { "product": "Cisco IOS XE Software", "range": "16.12.5a" }, { "product": "Cisco IOS XE Software", "range": "16.12.5b" }, { "product": "Cisco IOS XE Software", "range": "16.12.1z2" }, { "product": "Cisco IOS XE Software", "range": "16.12.6a" }, { "product": "Cisco IOS XE Software", "range": "16.12.7" }, { "product": "Cisco IOS XE Software", "range": "16.12.9" }, { "product": "Cisco IOS XE Software", "range": "16.12.10" }, { "product": "Cisco IOS XE Software", "range": "16.12.10a" }, { "product": "Cisco IOS XE Software", "range": "16.12.11" }, { "product": "Cisco IOS XE Software", "range": "16.12.12" }, { "product": "Cisco IOS XE Software", "range": "16.12.13" }, { "product": "Cisco IOS XE Software", "range": "3.11.0E" }, { "product": "Cisco IOS XE Software", "range": "3.11.1E" }, { "product": "Cisco IOS XE Software", "range": "3.11.2E" }, { "product": "Cisco IOS XE Software", "range": "3.11.3E" }, { "product": "Cisco IOS XE Software", "range": "3.11.1aE" }, { "product": "Cisco IOS XE Software", "range": "3.11.4E" }, { "product": "Cisco IOS XE Software", "range": "3.11.3aE" }, { "product": "Cisco IOS XE Software", "range": "3.11.5E" }, { "product": "Cisco IOS XE Software", "range": "3.11.6E" }, { "product": "Cisco IOS XE Software", "range": "3.11.7E" }, { "product": "Cisco IOS XE Software", "range": "3.11.8E" }, { "product": "Cisco IOS XE Software", "range": "3.11.9E" }, { "product": "Cisco IOS XE Software", "range": "3.11.10E" }, { "product": "Cisco IOS XE Software", "range": "3.11.11E" }, { "product": "Cisco IOS XE Software", "range": "3.11.12E" }, { "product": "Cisco IOS XE Software", "range": "17.1.1" }, { "product": "Cisco IOS XE Software", "range": "17.1.1a" }, { "product": "Cisco IOS XE Software", "range": "17.1.1s" }, { "product": "Cisco IOS XE Software", "range": "17.1.1t" }, { "product": "Cisco IOS XE Software", "range": "17.1.3" }, { "product": "Cisco IOS XE Software", "range": "17.2.1" }, { "product": "Cisco IOS XE Software", "range": "17.2.1r" }, { "product": "Cisco IOS XE Software", "range": "17.2.1a" }, { "product": "Cisco IOS XE Software", "range": "17.2.1v" }, { "product": "Cisco IOS XE Software", "range": "17.2.2" }, { "product": "Cisco IOS XE Software", "range": "17.2.3" }, { "product": "Cisco IOS XE Software", "range": "17.3.1" }, { "product": "Cisco IOS XE Software", "range": "17.3.2" }, { "product": "Cisco IOS XE Software", "range": "17.3.3" }, { "product": "Cisco IOS XE Software", "range": "17.3.1a" }, { "product": "Cisco IOS XE Software", "range": "17.3.1w" }, { "product": "Cisco IOS XE Software", "range": "17.3.2a" }, { "product": "Cisco IOS XE Software", "range": "17.3.1x" }, { "product": "Cisco IOS XE Software", "range": "17.3.1z" }, { "product": "Cisco IOS XE Software", "range": "17.3.4" }, { "product": "Cisco IOS XE Software", "range": "17.3.5" }, { "product": "Cisco IOS XE Software", "range": "17.3.4a" }, { "product": "Cisco IOS XE Software", "range": "17.3.6" }, { "product": "Cisco IOS XE Software", "range": "17.3.4b" }, { "product": "Cisco IOS XE Software", "range": "17.3.4c" }, { "product": "Cisco IOS XE Software", "range": "17.3.5a" }, { "product": "Cisco IOS XE Software", "range": "17.3.5b" }, { "product": "Cisco IOS XE Software", "range": "17.3.7" }, { "product": "Cisco IOS XE Software", "range": "17.3.8" }, { "product": "Cisco IOS XE Software", "range": "17.3.8a" }, { "product": "Cisco IOS XE Software", "range": "17.4.1" }, { "product": "Cisco IOS XE Software", "range": "17.4.2" }, { "product": "Cisco IOS XE Software", "range": "17.4.1a" }, { "product": "Cisco IOS XE Software", "range": "17.4.1b" }, { "product": "Cisco IOS XE Software", "range": "17.4.2a" }, { "product": "Cisco IOS XE Software", "range": "17.5.1" }, { "product": "Cisco IOS XE Software", "range": "17.5.1a" }, { "product": "Cisco IOS XE Software", "range": "17.6.1" }, { "product": "Cisco IOS XE Software", "range": "17.6.2" }, { "product": "Cisco IOS XE Software", "range": "17.6.1w" }, { "product": "Cisco IOS XE Software", "range": "17.6.1a" }, { "product": "Cisco IOS XE Software", "range": "17.6.1x" }, { "product": "Cisco IOS XE Software", "range": "17.6.3" }, { "product": "Cisco IOS XE Software", "range": "17.6.1y" }, { "product": "Cisco IOS XE Software", "range": "17.6.1z" }, { "product": "Cisco IOS XE Software", "range": "17.6.3a" }, { "product": "Cisco IOS XE Software", "range": "17.6.4" }, { "product": "Cisco IOS XE Software", "range": "17.6.1z1" }, { "product": "Cisco IOS XE Software", "range": "17.6.5" }, { "product": "Cisco IOS XE Software", "range": "17.6.6" }, { "product": "Cisco IOS XE Software", "range": "17.6.6a" }, { "product": "Cisco IOS XE Software", "range": "17.6.5a" }, { "product": "Cisco IOS XE Software", "range": "17.6.7" }, { "product": "Cisco IOS XE Software", "range": "17.6.8" }, { "product": "Cisco IOS XE Software", "range": "17.6.8a" }, { "product": "Cisco IOS XE Software", "range": "17.7.1" }, { "product": "Cisco IOS XE Software", "range": "17.7.1a" }, { "product": "Cisco IOS XE Software", "range": "17.7.1b" }, { "product": "Cisco IOS XE Software", "range": "17.7.2" }, { "product": "Cisco IOS XE Software", "range": "17.10.1" }, { "product": "Cisco IOS XE Software", "range": "17.10.1a" }, { "product": "Cisco IOS XE Software", "range": "17.10.1b" }, { "product": "Cisco IOS XE Software", "range": "17.8.1" }, { "product": "Cisco IOS XE Software", "range": "17.8.1a" }, { "product": "Cisco IOS XE Software", "range": "17.9.1" }, { "product": "Cisco IOS XE Software", "range": "17.9.1w" }, { "product": "Cisco IOS XE Software", "range": "17.9.2" }, { "product": "Cisco IOS XE Software", "range": "17.9.1a" }, { "product": "Cisco IOS XE Software", "range": "17.9.1x" }, { "product": "Cisco IOS XE Software", "range": "17.9.1y" }, { "product": "Cisco IOS XE Software", "range": "17.9.3" }, { "product": "Cisco IOS XE Software", "range": "17.9.2a" }, { "product": "Cisco IOS XE Software", "range": "17.9.1x1" }, { "product": "Cisco IOS XE Software", "range": "17.9.3a" }, { "product": "Cisco IOS XE Software", "range": "17.9.4" }, { "product": "Cisco IOS XE Software", "range": "17.9.1y1" }, { "product": "Cisco IOS XE Software", "range": "17.9.5" }, { "product": "Cisco IOS XE Software", "range": "17.9.4a" }, { "product": "Cisco IOS XE Software", "range": "17.9.5a" }, { "product": "Cisco IOS XE Software", "range": "17.9.5b" }, { "product": "Cisco IOS XE Software", "range": "17.9.6" }, { "product": "Cisco IOS XE Software", "range": "17.9.6a" }, { "product": "Cisco IOS XE Software", "range": "17.9.7" }, { "product": "Cisco IOS XE Software", "range": "17.9.5e" }, { "product": "Cisco IOS XE Software", "range": "17.9.5f" }, { "product": "Cisco IOS XE Software", "range": "17.9.7a" }, { "product": "Cisco IOS XE Software", "range": "17.9.7b" }, { "product": "Cisco IOS XE Software", "range": "17.11.1" }, { "product": "Cisco IOS XE Software", "range": "17.11.1a" }, { "product": "Cisco IOS XE Software", "range": "17.12.1" }, { "product": "Cisco IOS XE Software", "range": "17.12.1w" }, { "product": "Cisco IOS XE Software", "range": "17.12.1a" }, { "product": "Cisco IOS XE Software", "range": "17.12.1x" }, { "product": "Cisco IOS XE Software", "range": "17.12.2" }, { "product": "Cisco IOS XE Software", "range": "17.12.3" }, { "product": "Cisco IOS XE Software", "range": "17.12.2a" }, { "product": "Cisco IOS XE Software", "range": "17.12.1y" }, { "product": "Cisco IOS XE Software", "range": "17.12.1z" }, { "product": "Cisco IOS XE Software", "range": "17.12.4" }, { "product": "Cisco IOS XE Software", "range": "17.12.3a" }, { "product": "Cisco IOS XE Software", "range": "17.12.1z1" }, { "product": "Cisco IOS XE Software", "range": "17.12.1z2" }, { "product": "Cisco IOS XE Software", "range": "17.12.4a" }, { "product": "Cisco IOS XE Software", "range": "17.12.5" }, { "product": "Cisco IOS XE Software", "range": "17.12.4b" }, { "product": "Cisco IOS XE Software", "range": "17.12.1z3" }, { "product": "Cisco IOS XE Software", "range": "17.12.5a" }, { "product": "Cisco IOS XE Software", "range": "17.12.1z4" }, { "product": "Cisco IOS XE Software", "range": "17.12.5b" }, { "product": "Cisco IOS XE Software", "range": "17.12.5c" }, { "product": "Cisco IOS XE Software", "range": "17.13.1" }, { "product": "Cisco IOS XE Software", "range": "17.13.1a" }, { "product": "Cisco IOS XE Software", "range": "17.14.1" }, { "product": "Cisco IOS XE Software", "range": "17.14.1a" }, { "product": "Cisco IOS XE Software", "range": "17.15.1" }, { "product": "Cisco IOS XE Software", "range": "17.15.1w" }, { "product": "Cisco IOS XE Software", "range": "17.15.1a" }, { "product": "Cisco IOS XE Software", "range": "17.15.2" }, { "product": "Cisco IOS XE Software", "range": "17.15.1b" }, { "product": "Cisco IOS XE Software", "range": "17.15.1x" }, { "product": "Cisco IOS XE Software", "range": "17.15.1z" }, { "product": "Cisco IOS XE Software", "range": "17.15.3" }, { "product": "Cisco IOS XE Software", "range": "17.15.2c" }, { "product": "Cisco IOS XE Software", "range": "17.15.2a" }, { "product": "Cisco IOS XE Software", "range": "17.15.1y" }, { "product": "Cisco IOS XE Software", "range": "17.15.2b" }, { "product": "Cisco IOS XE Software", "range": "17.15.3a" }, { "product": "Cisco IOS XE Software", "range": "17.15.4" }, { "product": "Cisco IOS XE Software", "range": "17.15.3b" }, { "product": "Cisco IOS XE Software", "range": "17.16.1" }, { "product": "Cisco IOS XE Software", "range": "17.16.1a" }, { "product": "Cisco IOS XE Software", "range": "17.17.1" }, { "product": "Cisco IOS XE Software", "range": "17.18.1" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.9.1" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.9.2" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.9.3" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.9.4" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.1" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.2" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.3" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.3a" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.3b" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.4" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.5" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.10.6" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.11.1a" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.1b" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.1d" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.1e" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.2r" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.3" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.4" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.4a" }, { "product": "Cisco IOS XE Catalyst SD-WAN", "range": "16.12.5" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20352", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20352", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-24T17:10:42.891Z", "modifiedAt": "2026-02-26T17:48:03.098Z", "fetchedAt": "2026-10-24T04:41:40.388Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:\r\n\r \r An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. \r An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. \r \r An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. \r\n\r This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.\r\n\r Note: This vulnerability affects all versions of SNMP.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "IOS", "versions": [ { "version": "12.2(55)SE", "status": "affected" }, { "version": "12.2(55)SE3", "status": "affected" }, { "version": "12.2(55)SE2", "status": "affected" }, { "version": "12.2(58)SE", "status": "affected" }, { "version": "12.2(55)SE1", "status": "affected" }, { "version": "12.2(58)SE1", "status": "affected" }, { "version": "12.2(55)SE4", "status": "affected" }, { "version": "12.2(58)SE2", "status": "affected" }, { "version": "12.2(55)SE5", "status": "affected" }, { "version": "12.2(55)SE6", "status": "affected" }, { "version": "12.2(55)SE7", "status": "affected" }, { "version": "12.2(55)SE8", "status": "affected" }, { "version": "12.2(55)SE9", "status": "affected" }, { "version": "12.2(55)SE10", "status": "affected" }, { "version": "12.2(55)SE11", "status": "affected" }, { "version": "12.2(55)SE12", "status": "affected" }, { "version": "12.2(55)SE13", "status": "affected" }, { "version": "12.2(58)EZ", "status": "affected" }, { "version": "12.2(53)EZ", "status": "affected" }, { "version": "12.2(55)EZ", "status": "affected" }, { "version": "12.2(60)EZ", "status": "affected" }, { "version": "12.2(60)EZ1", "status": "affected" }, { "version": "12.2(60)EZ2", "status": "affected" }, { "version": "12.2(60)EZ3", "status": "affected" }, { "version": "12.2(60)EZ4", "status": "affected" }, { "version": "12.2(60)EZ5", "status": "affected" }, { "version": "12.2(60)EZ6", "status": "affected" }, { "version": "12.2(60)EZ7", "status": "affected" }, { "version": "12.2(60)EZ8", "status": "affected" }, { "version": "12.2(60)EZ9", "status": "affected" }, { "version": "12.2(60)EZ10", "status": "affected" }, { "version": "12.2(60)EZ11", "status": "affected" }, { "version": "12.2(60)EZ12", "status": "affected" }, { "version": "12.2(60)EZ13", "status": "affected" }, { "version": "12.2(60)EZ14", "status": "affected" }, { "version": "12.2(60)EZ15", "status": "affected" }, { "version": "12.2(33)SXI2", "status": "affected" }, { "version": "12.2(33)SXI3", "status": "affected" }, { "version": "12.2(33)SXI5", "status": "affected" }, { "version": "12.2(33)SXI4a", "status": "affected" }, { "version": "12.2(33)SXI4", "status": "affected" }, { "version": "12.2(33)SXI2a", "status": "affected" }, { "version": "12.2(33)SXI", "status": "affected" }, { "version": "12.2(33)SXI6", "status": "affected" }, { "version": "12.2(33)SXI7", "status": "affected" }, { "version": "12.2(33)SXI1", "status": "affected" }, { "version": "12.2(33)SXI8", "status": "affected" }, { "version": "12.2(33)SXI9", "status": "affected" }, { "version": "12.2(33)SXI8a", "status": "affected" }, { "version": "12.2(33)SXI10", "status": "affected" }, { "version": "12.2(33)SXI11", "status": "affected" }, { "version": "12.2(33)SXI12", "status": "affected" }, { "version": "12.2(33)SXI13", "status": "affected" }, { "version": "12.2(33)SXI14", "status": "affected" }, { "version": "12.2(50)SQ2", "status": "affected" }, { "version": "12.2(50)SQ1", "status": "affected" }, { "version": "12.2(50)SQ", "status": "affected" }, { "version": "12.2(50)SQ3", "status": "affected" }, { "version": "12.2(50)SQ4", "status": "affected" }, { "version": "12.2(50)SQ5", "status": "affected" }, { "version": "12.2(50)SQ6", "status": "affected" }, { "version": "12.2(50)SQ7", "status": "affected" }, { "version": "15.3(1)T", "status": "affected" }, { "version": "15.3(2)T", "status": "affected" }, { "version": "15.3(1)T1", "status": "affected" }, { "version": "15.3(1)T2", "status": "affected" }, { "version": "15.3(1)T3", "status": "affected" }, { "version": "15.3(1)T4", "status": "affected" }, { "version": "15.3(2)T1", "status": "affected" }, { "version": "15.3(2)T2", "status": "affected" }, { "version": "15.3(2)T3", "status": "affected" }, { "version": "15.3(2)T4", "status": "affected" }, { "version": "15.0(1)EY", "status": "affected" }, { "version": "15.0(1)EY1", "status": "affected" }, { "version": "15.0(1)EY2", "status": "affected" }, { "version": "15.0(2)EY", "status": "affected" }, { "version": "15.0(2)EY1", "status": "affected" }, { "version": "15.0(2)EY2", "status": "affected" }, { "version": "15.0(2)EY3", "status": "affected" }, { "version": "15.0(1)SE", "status": "affected" }, { "version": "15.0(2)SE", "status": "affected" }, { "version": "15.0(1)SE1", "status": "affected" }, { "version": "15.0(1)SE2", "status": "affected" }, { "version": "15.0(1)SE3", "status": "affected" }, { "version": "15.0(2)SE1", "status": "affected" }, { "version": "15.0(2)SE2", "status": "affected" }, { "version": "15.0(2)SE3", "status": "affected" }, { "version": "15.0(2)SE4", "status": "affected" }, { "version": "15.0(2)SE5", "status": "affected" }, { "version": "15.0(2)SE6", "status": "affected" }, { "version": "15.0(2)SE7", "status": "affected" }, { "version": "15.0(2)SE8", "status": "affected" }, { "version": "15.0(2)SE9", "status": "affected" }, { "version": "15.0(2)SE10", "status": "affected" }, { "version": "15.0(2)SE11", "status": "affected" }, { "version": "15.0(2)SE10a", "status": "affected" }, { "version": "15.0(2)SE12", "status": "affected" }, { "version": "15.0(2)SE13", "status": "affected" }, { "version": "15.0(1)SY", "status": "affected" }, { "version": "15.0(1)SY1", "status": "affected" }, { "version": "15.0(1)SY2", "status": "affected" }, { "version": "15.0(1)SY3", "status": "affected" }, { "version": "15.0(1)SY4", "status": "affected" }, { "version": "15.0(1)SY5", "status": "affected" }, { "version": "15.0(1)SY6", "status": "affected" }, { "version": "15.0(1)SY7", "status": "affected" }, { "version": "15.0(1)SY8", "status": "affected" }, { "version": "15.0(1)SY7a", "status": "affected" }, { "version": "15.0(1)SY9", "status": "affected" }, { "version": "15.0(1)SY10", "status": "affected" }, { "version": "12.2(33)SXJ", "status": "affected" }, { "version": "12.2(33)SXJ1", "status": "affected" }, { "version": "12.2(33)SXJ2", "status": "affected" }, { "version": "12.2(33)SXJ3", "status": "affected" }, { "version": "12.2(33)SXJ4", "status": "affected" }, { "version": "12.2(33)SXJ5", "status": "affected" }, { "version": "12.2(33)SXJ6", "status": "affected" }, { "version": "12.2(33)SXJ7", "status": "affected" }, { "version": "12.2(33)SXJ8", "status": "affected" }, { "version": "12.2(33)SXJ9", "status": "affected" }, { "version": "12.2(33)SXJ10", "status": "affected" }, { "version": "15.1(1)SG", "status": "affected" }, { "version": "15.1(2)SG", "status": "affected" }, { "version": "15.1(1)SG1", "status": "affected" }, { "version": "15.1(1)SG2", "status": "affected" }, { "version": "15.1(2)SG1", "status": "affected" }, { "version": "15.1(2)SG2", "status": "affected" }, { "version": "15.1(2)SG3", "status": "affected" }, { "version": "15.1(2)SG4", "status": "affected" }, { "version": "15.1(2)SG5", "status": "affected" }, { "version": "15.1(2)SG6", "status": "affected" }, { "version": "15.1(2)SG7", "status": "affected" }, { "version": "15.1(2)SG8", "status": "affected" }, { "version": "15.2(4)M", "status": "affected" }, { "version": "15.2(4)M1", "status": "affected" }, { "version": "15.2(4)M2", "status": "affected" }, { "version": "15.2(4)M4", "status": "affected" }, { "version": "15.2(4)M3", "status": "affected" }, { "version": "15.2(4)M5", "status": "affected" }, { "version": "15.2(4)M8", "status": "affected" }, { "version": "15.2(4)M10", "status": "affected" }, { "version": "15.2(4)M7", "status": "affected" }, { "version": "15.2(4)M6", "status": "affected" }, { "version": "15.2(4)M9", "status": "affected" }, { "version": "15.2(4)M6a", "status": "affected" }, { "version": "15.2(4)M11", "status": "affected" }, { "version": "15.0(2)SG", "status": "affected" }, { "version": "15.0(2)SG1", "status": "affected" }, { "version": "15.0(2)SG2", "status": "affected" }, { "version": "15.0(2)SG3", "status": "affected" }, { "version": "15.0(2)SG4", "status": "affected" }, { "version": "15.0(2)SG5", "status": "affected" }, { "version": "15.0(2)SG6", "status": "affected" }, { "version": "15.0(2)SG7", "status": "affected" }, { "version": "15.0(2)SG8", "status": "affected" }, { "version": "15.0(2)SG9", "status": "affected" }, { "version": "15.0(2)SG10", "status": "affected" }, { "version": "15.0(2)SG11", "status": "affected" }, { "version": "15.2(2)GC", "status": "affected" }, { "version": "15.2(3)GC", "status": "affected" }, { "version": "15.2(3)GC1", "status": "affected" }, { "version": "15.2(4)GC", "status": "affected" }, { "version": "15.2(4)GC1", "status": "affected" }, { "version": "15.2(4)GC2", "status": "affected" }, { "version": "15.2(4)GC3", "status": "affected" }, { "version": "15.1(1)SY", "status": "affected" }, { "version": "15.1(1)SY1", "status": "affected" }, { "version": "15.1(2)SY", "status": "affected" }, { "version": "15.1(2)SY1", "status": "affected" }, { "version": "15.1(2)SY2", "status": "affected" }, { "version": "15.1(1)SY2", "status": "affected" }, { "version": "15.1(1)SY3", "status": "affected" }, { "version": "15.1(2)SY3", "status": "affected" }, { "version": "15.1(1)SY4", "status": "affected" }, { "version": "15.1(2)SY4", "status": "affected" }, { "version": "15.1(1)SY5", "status": "affected" }, { "version": "15.1(2)SY5", "status": "affected" }, { "version": "15.1(2)SY4a", "status": "affected" }, { "version": "15.1(1)SY6", "status": "affected" }, { "version": "15.1(2)SY6", "status": "affected" }, { "version": "15.1(2)SY7", "status": "affected" }, { "version": "15.1(2)SY8", "status": "affected" }, { "version": "15.1(2)SY9", "status": "affected" }, { "version": "15.1(2)SY10", "status": "affected" }, { "version": "15.1(2)SY11", "status": "affected" }, { "version": "15.1(2)SY12", "status": "affected" }, { "version": "15.1(2)SY13", "status": "affected" }, { "version": "15.1(2)SY14", "status": "affected" }, { "version": "15.1(2)SY15", "status": "affected" }, { "version": "15.1(2)SY16", "status": "affected" }, { "version": "15.4(1)T", "status": "affected" }, { "version": "15.4(2)T", "status": "affected" }, { "version": "15.4(1)T2", "status": "affected" }, { "version": "15.4(1)T1", "status": "affected" }, { "version": "15.4(1)T3", "status": "affected" }, { "version": "15.4(2)T1", "status": "affected" }, { "version": "15.4(2)T3", "status": "affected" }, { "version": "15.4(2)T2", "status": "affected" }, { "version": "15.4(1)T4", "status": "affected" }, { "version": "15.4(2)T4", "status": "affected" }, { "version": "15.0(2)EA", "status": "affected" }, { "version": "15.0(2)EA1", "status": "affected" }, { "version": "15.2(1)E", "status": "affected" }, { "version": "15.2(2)E", "status": "affected" }, { "version": "15.2(1)E1", "status": "affected" }, { "version": "15.2(3)E", "status": "affected" }, { "version": "15.2(1)E2", "status": "affected" }, { "version": "15.2(1)E3", "status": "affected" }, { "version": "15.2(2)E1", "status": "affected" }, { "version": "15.2(4)E", "status": "affected" }, { "version": "15.2(3)E1", "status": "affected" }, { "version": "15.2(2)E2", "status": "affected" }, { "version": "15.2(2a)E1", "status": "affected" }, { "version": "15.2(2)E3", "status": "affected" }, { "version": "15.2(2a)E2", "status": "affected" }, { "version": "15.2(3)E2", "status": "affected" }, { "version": "15.2(3a)E", "status": "affected" }, { "version": "15.2(3)E3", "status": "affected" }, { "version": "15.2(4)E1", "status": "affected" }, { "version": "15.2(2)E4", "status": "affected" }, { "version": "15.2(2)E5", "status": "affected" }, { "version": "15.2(4)E2", "status": "affected" }, { "version": "15.2(3)E4", "status": "affected" }, { "version": "15.2(5)E", "status": "affected" }, { "version": "15.2(4)E3", "status": "affected" }, { "version": "15.2(2)E6", "status": "affected" }, { "version": "15.2(5a)E", "status": "affected" }, { "version": "15.2(5)E1", "status": "affected" }, { "version": "15.2(5b)E", "status": "affected" }, { "version": "15.2(2)E5a", "status": "affected" }, { "version": "15.2(5c)E", "status": "affected" }, { "version": "15.2(2)E5b", "status": "affected" }, { "version": "15.2(5a)E1", "status": "affected" }, { "version": "15.2(4)E4", "status": "affected" }, { "version": "15.2(2)E7", "status": "affected" }, { "version": "15.2(5)E2", "status": "affected" }, { "version": "15.2(6)E", "status": "affected" }, { "version": "15.2(4)E5", "status": "affected" }, { "version": "15.2(5)E2c", "status": "affected" }, { "version": "15.2(2)E8", "status": "affected" }, { "version": "15.2(6)E0a", "status": "affected" }, { "version": "15.2(6)E1", "status": "affected" }, { "version": "15.2(6)E0c", "status": "affected" }, { "version": "15.2(4)E6", "status": "affected" }, { "version": "15.2(6)E2", "status": "affected" }, { "version": "15.2(2)E9", "status": "affected" }, { "version": "15.2(4)E7", "status": "affected" }, { "version": "15.2(7)E", "status": "affected" }, { "version": "15.2(2)E10", "status": "affected" }, { "version": "15.2(4)E8", "status": "affected" }, { "version": "15.2(6)E2a", "status": "affected" }, { "version": "15.2(6)E2b", "status": "affected" }, { "version": "15.2(7)E1", "status": "affected" }, { "version": "15.2(7)E0a", "status": "affected" }, { "version": "15.2(7)E0b", "status": "affected" }, { "version": "15.2(7)E0s", "status": "affected" }, { "version": "15.2(6)E3", "status": "affected" }, { "version": "15.2(4)E9", "status": "affected" }, { "version": "15.2(7)E2", "status": "affected" }, { "version": "15.2(7a)E0b", "status": "affected" }, { "version": "15.2(4)E10", "status": "affected" }, { "version": "15.2(7)E3", "status": "affected" }, { "version": "15.2(7)E1a", "status": "affected" }, { "version": "15.2(7b)E0b", "status": "affected" }, { "version": "15.2(7)E2a", "status": "affected" }, { "version": "15.2(4)E10a", "status": "affected" }, { "version": "15.2(7)E4", "status": "affected" }, { "version": "15.2(7)E3k", "status": "affected" }, { "version": "15.2(8)E", "status": "affected" }, { "version": "15.2(8)E1", "status": "affected" }, { "version": "15.2(7)E5", "status": "affected" }, { "version": "15.2(7)E6", "status": "affected" }, { "version": "15.2(8)E2", "status": "affected" }, { "version": "15.2(4)E10d", "status": "affected" }, { "version": "15.2(7)E7", "status": "affected" }, { "version": "15.2(8)E3", "status": "affected" }, { "version": "15.2(7)E8", "status": "affected" }, { "version": "15.2(8)E4", "status": "affected" }, { "version": "15.2(7)E9", "status": "affected" }, { "version": "15.2(8)E5", "status": "affected" }, { "version": "15.2(8)E6", "status": "affected" }, { "version": "15.2(7)E10", "status": "affected" }, { "version": "15.2(7)E11", "status": "affected" }, { "version": "15.2(8)E7", "status": "affected" }, { "version": "15.2(7)E12", "status": "affected" }, { "version": "15.2(2)JB", "status": "affected" }, { "version": "15.2(2)JB2", "status": "affected" }, { "version": "15.2(4)JB", "status": "affected" }, { "version": "15.2(2)JB3", "status": "affected" }, { "version": "15.2(4)JB1", "status": "affected" }, { "version": "15.2(4)JB2", "status": "affected" }, { "version": "15.2(4)JB3", "status": "affected" }, { "version": "15.2(4)JB3a", "status": "affected" }, { "version": "15.2(2)JB4", "status": "affected" }, { "version": "15.2(4)JB4", "status": "affected" }, { "version": "15.2(4)JB3h", "status": "affected" }, { "version": "15.2(4)JB3b", "status": "affected" }, { "version": "15.2(4)JB5", "status": "affected" }, { "version": "15.2(4)JB6", "status": "affected" }, { "version": "15.2(2)JB5", "status": "affected" }, { "version": "15.2(2)JB6", "status": "affected" }, { "version": "15.2(2)JAX", "status": "affected" }, { "version": "15.3(3)M", "status": "affected" }, { "version": "15.3(3)M1", "status": "affected" }, { "version": "15.3(3)M2", "status": "affected" }, { "version": "15.3(3)M3", "status": "affected" }, { "version": "15.3(3)M5", "status": "affected" }, { "version": "15.3(3)M4", "status": "affected" }, { "version": "15.3(3)M6", "status": "affected" }, { "version": "15.3(3)M7", "status": "affected" }, { "version": "15.3(3)M8", "status": "affected" }, { "version": "15.3(3)M9", "status": "affected" }, { "version": "15.3(3)M10", "status": "affected" }, { "version": "15.3(3)M8a", "status": "affected" }, { "version": "15.2(4)JN", "status": "affected" }, { "version": "15.2(1)EY", "status": "affected" }, { "version": "15.0(2)EJ", "status": "affected" }, { "version": "15.0(2)EJ1", "status": "affected" }, { "version": "15.2(1)SY", "status": "affected" }, { "version": "15.2(1)SY1", "status": "affected" }, { "version": "15.2(1)SY0a", "status": "affected" }, { "version": "15.2(1)SY2", "status": "affected" }, { "version": "15.2(2)SY", "status": "affected" }, { "version": "15.2(1)SY1a", "status": "affected" }, { "version": "15.2(2)SY1", "status": "affected" }, { "version": "15.2(2)SY2", "status": "affected" }, { "version": "15.2(1)SY3", "status": "affected" }, { "version": "15.2(1)SY4", "status": "affected" }, { "version": "15.2(2)SY3", "status": "affected" }, { "version": "15.2(1)SY5", "status": "affected" }, { "version": "15.2(1)SY6", "status": "affected" }, { "version": "15.2(1)SY7", "status": "affected" }, { "version": "15.2(1)SY8", "status": "affected" }, { "version": "15.2(5)EX", "status": "affected" }, { "version": "15.0(2)EK", "status": "affected" }, { "version": "15.0(2)EK1", "status": "affected" }, { "version": "15.4(1)CG", "status": "affected" }, { "version": "15.4(1)CG1", "status": "affected" }, { "version": "15.4(2)CG", "status": "affected" }, { "version": "15.5(1)S", "status": "affected" }, { "version": "15.5(2)S", "status": "affected" }, { "version": "15.5(1)S1", "status": "affected" }, { "version": "15.5(3)S", "status": "affected" }, { "version": "15.5(1)S2", "status": "affected" }, { "version": "15.5(1)S3", "status": "affected" }, { "version": "15.5(2)S1", "status": "affected" }, { "version": "15.5(2)S2", "status": "affected" }, { "version": "15.5(3)S1", "status": "affected" }, { "version": "15.5(3)S1a", "status": "affected" }, { "version": "15.5(2)S3", "status": "affected" }, { "version": "15.5(3)S2", "status": "affected" }, { "version": "15.5(3)S0a", "status": "affected" }, { "version": "15.5(3)S3", "status": "affected" }, { "version": "15.5(1)S4", "status": "affected" }, { "version": "15.5(2)S4", "status": "affected" }, { "version": "15.5(3)S4", "status": "affected" }, { "version": "15.5(3)S5", "status": "affected" }, { "version": "15.5(3)S6", "status": "affected" }, { "version": "15.5(3)S6a", "status": "affected" }, { "version": "15.5(3)S7", "status": "affected" }, { "version": "15.5(3)S6b", "status": "affected" }, { "version": "15.5(3)S8", "status": "affected" }, { "version": "15.5(3)S9", "status": "affected" }, { "version": "15.5(3)S10", "status": "affected" }, { "version": "15.5(3)S9a", "status": "affected" }, { "version": "15.5(1)T", "status": "affected" }, { "version": "15.5(1)T1", "status": "affected" }, { "version": "15.5(2)T", "status": "affected" }, { "version": "15.5(1)T2", "status": "affected" }, { "version": "15.5(1)T3", "status": "affected" }, { "version": "15.5(2)T1", "status": "affected" }, { "version": "15.5(2)T2", "status": "affected" }, { "version": "15.5(2)T3", "status": "affected" }, { "version": "15.5(2)T4", "status": "affected" }, { "version": "15.5(1)T4", "status": "affected" }, { "version": "15.2(2)EA", "status": "affected" }, { "version": "15.2(2)EA1", "status": "affected" }, { "version": "15.2(2)EA2", "status": "affected" }, { "version": "15.2(3)EA", "status": "affected" }, { "version": "15.2(4)EA", "status": "affected" }, { "version": "15.2(4)EA1", "status": "affected" }, { "version": "15.2(2)EA3", "status": "affected" }, { "version": "15.2(4)EA3", "status": "affected" }, { "version": "15.2(5)EA", "status": "affected" }, { "version": "15.2(4)EA4", "status": "affected" }, { "version": "15.2(4)EA5", "status": "affected" }, { "version": "15.2(4)EA6", "status": "affected" }, { "version": "15.2(4)EA7", "status": "affected" }, { "version": "15.2(4)EA8", "status": "affected" }, { "version": "15.2(4)EA9", "status": "affected" }, { "version": "15.2(4)EA9a", "status": "affected" }, { "version": "15.3(3)JN3", "status": "affected" }, { "version": "15.3(3)JN4", "status": "affected" }, { "version": "15.3(3)JN7", "status": "affected" }, { "version": "15.3(3)JN8", "status": "affected" }, { "version": "15.3(3)JN9", "status": "affected" }, { "version": "15.5(3)M", "status": "affected" }, { "version": "15.5(3)M1", "status": "affected" }, { "version": "15.5(3)M0a", "status": "affected" }, { "version": "15.5(3)M2", "status": "affected" }, { "version": "15.5(3)M3", "status": "affected" }, { "version": "15.5(3)M4", "status": "affected" }, { "version": "15.5(3)M4a", "status": "affected" }, { "version": "15.5(3)M5", "status": "affected" }, { "version": "15.5(3)M6", "status": "affected" }, { "version": "15.5(3)M7", "status": "affected" }, { "version": "15.5(3)M6a", "status": "affected" }, { "version": "15.5(3)M8", "status": "affected" }, { "version": "15.5(3)M9", "status": "affected" }, { "version": "15.5(3)M10", "status": "affected" }, { "version": "15.3(3)JA1m", "status": "affected" }, { "version": "15.3(3)JA1", "status": "affected" }, { "version": "15.3(3)JA4", "status": "affected" }, { "version": "15.3(3)JA5", "status": "affected" }, { "version": "15.3(3)JA6", "status": "affected" }, { "version": "15.3(3)JA7", "status": "affected" }, { "version": "15.3(3)JA8", "status": "affected" }, { "version": "15.3(3)JA10", "status": "affected" }, { "version": "15.3(3)JA11", "status": "affected" }, { "version": "15.3(3)JA12", "status": "affected" }, { "version": "15.3(3)JAA", "status": "affected" }, { "version": "15.3(3)JAA11", "status": "affected" }, { "version": "15.3(3)JAA12", "status": "affected" }, { "version": "15.3(3)JAB", "status": "affected" }, { "version": "15.3(3)JB", "status": "affected" }, { "version": "15.5(3)SN", "status": "affected" }, { "version": "15.0(2)SQD", "status": "affected" }, { "version": "15.0(2)SQD1", "status": "affected" }, { "version": "15.0(2)SQD2", "status": "affected" }, { "version": "15.0(2)SQD3", "status": "affected" }, { "version": "15.0(2)SQD4", "status": "affected" }, { "version": "15.0(2)SQD5", "status": "affected" }, { "version": "15.0(2)SQD6", "status": "affected" }, { "version": "15.0(2)SQD7", "status": "affected" }, { "version": "15.0(2)SQD8", "status": "affected" }, { "version": "15.6(1)S", "status": "affected" }, { "version": "15.6(2)S", "status": "affected" }, { "version": "15.6(2)S1", "status": "affected" }, { "version": "15.6(1)S1", "status": "affected" }, { "version": "15.6(1)S2", "status": "affected" }, { "version": "15.6(2)S2", "status": "affected" }, { "version": "15.6(1)S3", "status": "affected" }, { "version": "15.6(2)S3", "status": "affected" }, { "version": "15.6(1)S4", "status": "affected" }, { "version": "15.6(2)S4", "status": "affected" }, { "version": "15.6(1)T", "status": "affected" }, { "version": "15.6(2)T", "status": "affected" }, { "version": "15.6(1)T0a", "status": "affected" }, { "version": "15.6(1)T1", "status": "affected" }, { "version": "15.6(2)T1", "status": "affected" }, { "version": "15.6(1)T2", "status": "affected" }, { "version": "15.6(2)T2", "status": "affected" }, { "version": "15.6(1)T3", "status": "affected" }, { "version": "15.6(2)T3", "status": "affected" }, { "version": "15.3(3)JNB", "status": "affected" }, { "version": "15.3(3)JNB1", "status": "affected" }, { "version": "15.3(3)JNB2", "status": "affected" }, { "version": "15.3(3)JNB3", "status": "affected" }, { "version": "15.3(3)JNB4", "status": "affected" }, { "version": "15.3(3)JNB6", "status": "affected" }, { "version": "15.3(3)JNB5", "status": "affected" }, { "version": "15.3(3)JAX", "status": "affected" }, { "version": "15.3(3)JAX1", "status": "affected" }, { "version": "15.3(3)JAX2", "status": "affected" }, { "version": "15.3(3)JBB", "status": "affected" }, { "version": "15.3(3)JBB1", "status": "affected" }, { "version": "15.3(3)JBB2", "status": "affected" }, { "version": "15.3(3)JBB4", "status": "affected" }, { "version": "15.3(3)JBB5", "status": "affected" }, { "version": "15.3(3)JBB6", "status": "affected" }, { "version": "15.3(3)JBB8", "status": "affected" }, { "version": "15.3(3)JBB6a", "status": "affected" }, { "version": "15.3(3)JC", "status": "affected" }, { "version": "15.3(3)JC1", "status": "affected" }, { "version": "15.3(3)JC2", "status": "affected" }, { "version": "15.3(3)JC3", "status": "affected" }, { "version": "15.3(3)JC4", "status": "affected" }, { "version": "15.3(3)JC5", "status": "affected" }, { "version": "15.3(3)JC6", "status": "affected" }, { "version": "15.3(3)JC8", "status": "affected" }, { "version": "15.3(3)JC9", "status": "affected" }, { "version": "15.3(3)JC14", "status": "affected" }, { "version": "15.3(1)SY", "status": "affected" }, { "version": "15.3(1)SY1", "status": "affected" }, { "version": "15.3(1)SY2", "status": "affected" }, { "version": "15.3(3)JNC", "status": "affected" }, { "version": "15.3(3)JNC1", "status": "affected" }, { "version": "15.3(3)JNC4", "status": "affected" }, { "version": "15.3(3)JNP", "status": "affected" }, { "version": "15.3(3)JNP1", "status": "affected" }, { "version": "15.3(3)JNP3", "status": "affected" }, { "version": "15.6(2)SP", "status": "affected" }, { "version": "15.6(2)SP1", "status": "affected" }, { "version": "15.6(2)SP2", "status": "affected" }, { "version": "15.6(2)SP3", "status": "affected" }, { "version": "15.6(2)SP4", "status": "affected" }, { "version": "15.6(2)SP5", "status": "affected" }, { "version": "15.6(2)SP6", "status": "affected" }, { "version": "15.6(2)SP7", "status": "affected" }, { "version": "15.6(2)SP8", "status": "affected" }, { "version": "15.6(2)SP9", "status": "affected" }, { "version": "15.6(2)SN", "status": "affected" }, { "version": "15.3(3)JPB", "status": "affected" }, { "version": "15.3(3)JPB1", "status": "affected" }, { "version": "15.3(3)JD", "status": "affected" }, { "version": "15.3(3)JD2", "status": "affected" }, { "version": "15.3(3)JD3", "status": "affected" }, { "version": "15.3(3)JD4", "status": "affected" }, { "version": "15.3(3)JD5", "status": "affected" }, { "version": "15.3(3)JD6", "status": "affected" }, { "version": "15.3(3)JD7", "status": "affected" }, { "version": "15.3(3)JD8", "status": "affected" }, { "version": "15.3(3)JD9", "status": "affected" }, { "version": "15.3(3)JD11", "status": "affected" }, { "version": "15.3(3)JD13", "status": "affected" }, { "version": "15.3(3)JD14", "status": "affected" }, { "version": "15.3(3)JD16", "status": "affected" }, { "version": "15.3(3)JD17", "status": "affected" }, { "version": "15.6(3)M", "status": "affected" }, { "version": "15.6(3)M1", "status": "affected" }, { "version": "15.6(3)M0a", "status": "affected" }, { "version": "15.6(3)M1b", "status": "affected" }, { "version": "15.6(3)M2", "status": "affected" }, { "version": "15.6(3)M2a", "status": "affected" }, { "version": "15.6(3)M3", "status": "affected" }, { "version": "15.6(3)M3a", "status": "affected" }, { "version": "15.6(3)M4", "status": "affected" }, { "version": "15.6(3)M5", "status": "affected" }, { "version": "15.6(3)M6", "status": "affected" }, { "version": "15.6(3)M7", "status": "affected" }, { "version": "15.6(3)M6a", "status": "affected" }, { "version": "15.6(3)M6b", "status": "affected" }, { "version": "15.6(3)M8", "status": "affected" }, { "version": "15.6(3)M9", "status": "affected" }, { "version": "15.2(4)EC1", "status": "affected" }, { "version": "15.2(4)EC2", "status": "affected" }, { "version": "15.3(3)JPC", "status": "affected" }, { "version": "15.3(3)JPC1", "status": "affected" }, { "version": "15.3(3)JPC2", "status": "affected" }, { "version": "15.3(3)JPC3", "status": "affected" }, { "version": "15.3(3)JPC5", "status": "affected" }, { "version": "15.3(3)JND", "status": "affected" }, { "version": "15.3(3)JND1", "status": "affected" }, { "version": "15.3(3)JND2", "status": "affected" }, { "version": "15.3(3)JND3", "status": "affected" }, { "version": "15.4(1)SY", "status": "affected" }, { "version": "15.4(1)SY1", "status": "affected" }, { "version": "15.4(1)SY2", "status": "affected" }, { "version": "15.4(1)SY3", "status": "affected" }, { "version": "15.4(1)SY4", "status": "affected" }, { "version": "15.3(3)JE", "status": "affected" }, { "version": "15.3(3)JPD", "status": "affected" }, { "version": "15.3(3)JDA7", "status": "affected" }, { "version": "15.3(3)JDA8", "status": "affected" }, { "version": "15.3(3)JDA9", "status": "affected" }, { "version": "15.3(3)JDA11", "status": "affected" }, { "version": "15.3(3)JDA13", "status": "affected" }, { "version": "15.3(3)JDA14", "status": "affected" }, { "version": "15.3(3)JDA16", "status": "affected" }, { "version": "15.3(3)JDA17", "status": "affected" }, { "version": "15.5(1)SY", "status": "affected" }, { "version": "15.5(1)SY1", "status": "affected" }, { "version": "15.5(1)SY2", "status": "affected" }, { "version": "15.5(1)SY3", "status": "affected" }, { "version": "15.5(1)SY4", "status": "affected" }, { "version": "15.5(1)SY5", "status": "affected" }, { "version": "15.5(1)SY6", "status": "affected" }, { "version": "15.5(1)SY7", "status": "affected" }, { "version": "15.5(1)SY8", "status": "affected" }, { "version": "15.5(1)SY9", "status": "affected" }, { "version": "15.5(1)SY10", "status": "affected" }, { "version": "15.5(1)SY11", "status": "affected" }, { "version": "15.5(1)SY12", "status": "affected" }, { "version": "15.5(1)SY13", "status": "affected" }, { "version": "15.5(1)SY14", "status": "affected" }, { "version": "15.5(1)SY15", "status": "affected" }, { "version": "15.3(3)JF", "status": "affected" }, { "version": "15.3(3)JF1", "status": "affected" }, { "version": "15.3(3)JF2", "status": "affected" }, { "version": "15.3(3)JF4", "status": "affected" }, { "version": "15.3(3)JF5", "status": "affected" }, { "version": "15.3(3)JF6", "status": "affected" }, { "version": "15.3(3)JF7", "status": "affected" }, { "version": "15.3(3)JF8", "status": "affected" }, { "version": "15.3(3)JF9", "status": "affected" }, { "version": "15.3(3)JF10", "status": "affected" }, { "version": "15.3(3)JF11", "status": "affected" }, { "version": "15.3(3)JF12", "status": "affected" }, { "version": "15.3(3)JF12i", "status": "affected" }, { "version": "15.3(3)JF14", "status": "affected" }, { "version": "15.3(3)JF14i", "status": "affected" }, { "version": "15.3(3)JF15", "status": "affected" }, { "version": "15.3(3)JCA7", "status": "affected" }, { "version": "15.3(3)JCA8", "status": "affected" }, { "version": "15.3(3)JCA9", "status": "affected" }, { "version": "15.7(3)M", "status": "affected" }, { "version": "15.7(3)M1", "status": "affected" }, { "version": "15.7(3)M0a", "status": "affected" }, { "version": "15.7(3)M3", "status": "affected" }, { "version": "15.7(3)M2", "status": "affected" }, { "version": "15.7(3)M4", "status": "affected" }, { "version": "15.7(3)M5", "status": "affected" }, { "version": "15.7(3)M4a", "status": "affected" }, { "version": "15.7(3)M4b", "status": "affected" }, { "version": "15.7(3)M6", "status": "affected" }, { "version": "15.7(3)M7", "status": "affected" }, { "version": "15.7(3)M8", "status": "affected" }, { "version": "15.7(3)M9", "status": "affected" }, { "version": "15.3(3)JG", "status": "affected" }, { "version": "15.3(3)JG1", "status": "affected" }, { "version": "15.3(3)JH", "status": "affected" }, { "version": "15.3(3)JH1", "status": "affected" }, { "version": "15.3(3)JI1", "status": "affected" }, { "version": "15.3(3)JI3", "status": "affected" }, { "version": "15.3(3)JI4", "status": "affected" }, { "version": "15.3(3)JI5", "status": "affected" }, { "version": "15.3(3)JI6", "status": "affected" }, { "version": "15.8(3)M", "status": "affected" }, { "version": "15.8(3)M1", "status": "affected" }, { "version": "15.8(3)M0a", "status": "affected" }, { "version": "15.8(3)M0b", "status": "affected" }, { "version": "15.8(3)M2", "status": "affected" }, { "version": "15.8(3)M1a", "status": "affected" }, { "version": "15.8(3)M3", "status": "affected" }, { "version": "15.8(3)M2a", "status": "affected" }, { "version": "15.8(3)M4", "status": "affected" }, { "version": "15.8(3)M3a", "status": "affected" }, { "version": "15.8(3)M3b", "status": "affected" }, { "version": "15.8(3)M5", "status": "affected" }, { "version": "15.8(3)M6", "status": "affected" }, { "version": "15.8(3)M7", "status": "affected" }, { "version": "15.8(3)M8", "status": "affected" }, { "version": "15.8(3)M9", "status": "affected" }, { "version": "15.9(3)M", "status": "affected" }, { "version": "15.9(3)M1", "status": "affected" }, { "version": "15.9(3)M0a", "status": "affected" }, { "version": "15.9(3)M2", "status": "affected" }, { "version": "15.9(3)M3", "status": "affected" }, { "version": "15.9(3)M2a", "status": "affected" }, { "version": "15.9(3)M3a", "status": "affected" }, { "version": "15.9(3)M4", "status": "affected" }, { "version": "15.9(3)M3b", "status": "affected" }, { "version": "15.9(3)M5", "status": "affected" }, { "version": "15.9(3)M4a", "status": "affected" }, { "version": "15.9(3)M6", "status": "affected" }, { "version": "15.9(3)M7", "status": "affected" }, { "version": "15.9(3)M6a", "status": "affected" }, { "version": "15.9(3)M6b", "status": "affected" }, { "version": "15.9(3)M8", "status": "affected" }, { "version": "15.9(3)M7a", "status": "affected" }, { "version": "15.9(3)M9", "status": "affected" }, { "version": "15.9(3)M8b", "status": "affected" }, { "version": "15.9(3)M10", "status": "affected" }, { "version": "15.9(3)M11", "status": "affected" }, { "version": "15.3(3)JK", "status": "affected" }, { "version": "15.3(3)JK1", "status": "affected" }, { "version": "15.3(3)JK2", "status": "affected" }, { "version": "15.3(3)JK3", "status": "affected" }, { "version": "15.3(3)JK2a", "status": "affected" }, { "version": "15.3(3)JK1t", "status": "affected" }, { "version": "15.3(3)JK4", "status": "affected" }, { "version": "15.3(3)JK5", "status": "affected" }, { "version": "15.3(3)JK6", "status": "affected" }, { "version": "15.3(3)JK7", "status": "affected" }, { "version": "15.3(3)JK8", "status": "affected" }, { "version": "15.3(3)JK8a", "status": "affected" }, { "version": "15.3(3)JK8b", "status": "affected" }, { "version": "15.3(3)JK9", "status": "affected" }, { "version": "15.3(3)JK10", "status": "affected" }, { "version": "15.3(3)JK11", "status": "affected" }, { "version": "15.3(3)JJ", "status": "affected" }, { "version": "15.3(3)JJ1", "status": "affected" }, { "version": "15.3(3)JPI1", "status": "affected" }, { "version": "15.3(3)JPI4", "status": "affected" }, { "version": "15.3(3)JPI1t", "status": "affected" }, { "version": "15.3(3)JPI5", "status": "affected" }, { "version": "15.3(3)JPI7", "status": "affected" }, { "version": "15.3(3)JPI6a", "status": "affected" }, { "version": "15.3(3)JPI8a", "status": "affected" }, { "version": "15.3(3)JPI9", "status": "affected" }, { "version": "15.3(3)JPI10", "status": "affected" }, { "version": "15.3(3)JPJ2", "status": "affected" }, { "version": "15.3(3)JPJ3", "status": "affected" }, { "version": "15.3(3)JPJ2t", "status": "affected" }, { "version": "15.3(3)JPJ3a", "status": "affected" }, { "version": "15.3(3)JPJ4", "status": "affected" }, { "version": "15.3(3)JPJ5", "status": "affected" }, { "version": "15.3(3)JPJ6", "status": "affected" }, { "version": "15.3(3)JPJ7", "status": "affected" }, { "version": "15.3(3)JPJ7c", "status": "affected" }, { "version": "15.3(3)JPJ8a", "status": "affected" }, { "version": "15.3(3)JPJ9", "status": "affected" }, { "version": "15.3(3)JPJ10", "status": "affected" }, { "version": "15.3(3)JPJ11", "status": "affected" }, { "version": "15.3(3)JPK", "status": "affected" }, { "version": "15.3(3)JPK1", "status": "affected" }, { "version": "15.3(3)JPK2", "status": "affected" }, { "version": "15.3(3)JPK3", "status": "affected" }, { "version": "15.3(3)JPK4", "status": "affected" }, { "version": "15.3(3)JPK5", "status": "affected" }, { "version": "15.3(3)JPK6", "status": "affected" }, { "version": "15.3(3)JPK7", "status": "affected" }, { "version": "15.3(3)JPK8", "status": "affected" }, { "version": "15.3(3)JPK9", "status": "affected" }, { "version": "15.3(3)JPL", "status": "affected" }, { "version": "15.3(3)JPM", "status": "affected" }, { "version": "15.3(3)JPN", "status": "affected" }, { "version": "15.3(3)JPN1", "status": "affected" }, { "version": "15.3(3)JPN2", "status": "affected" }, { "version": "15.3(3)JPN3", "status": "affected" }, { "version": "15.3(3)JPN4", "status": "affected" }, { "version": "15.3(3)JPN5", "status": "affected" }, { "version": "15.3(3)JPN6", "status": "affected" }, { "version": "15.3(3)JPO", "status": "affected" }, { "version": "15.3(3)JPP", "status": "affected" }, { "version": "15.3(3)JPQ", "status": "affected" }, { "version": "15.3(3)JPQ1", "status": "affected" }, { "version": "15.3(3)JPQ2", "status": "affected" }, { "version": "15.3(3)JPQ3", "status": "affected" }, { "version": "15.3(3)JPQ4", "status": "affected" }, { "version": "15.3(3)JPQ5", "status": "affected" }, { "version": "15.3(3)JPR", "status": "affected" }, { "version": "15.3(3)JPS", "status": "affected" }, { "version": "15.3(3)JPT", "status": "affected" }, { "version": "15.3(3)JPT1", "status": "affected" }, { "version": "15.3(3)JPT2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [ { "version": "3.5.0E", "status": "affected" }, { "version": "3.5.1E", "status": "affected" }, { "version": "3.5.2E", "status": "affected" }, { "version": "3.5.3E", "status": "affected" }, { "version": "3.6.0E", "status": "affected" }, { "version": "3.6.1E", "status": "affected" }, { "version": "3.6.2aE", "status": "affected" }, { "version": "3.6.2E", "status": "affected" }, { "version": "3.6.3E", "status": "affected" }, { "version": "3.6.4E", "status": "affected" }, { "version": "3.6.5E", "status": "affected" }, { "version": "3.6.6E", "status": "affected" }, { "version": "3.6.5aE", "status": "affected" }, { "version": "3.6.7E", "status": "affected" }, { "version": "3.6.8E", "status": "affected" }, { "version": "3.6.7bE", "status": "affected" }, { "version": "3.6.9E", "status": "affected" }, { "version": "3.6.10E", "status": "affected" }, { "version": "3.14.0S", "status": "affected" }, { "version": "3.14.1S", "status": "affected" }, { "version": "3.14.2S", "status": "affected" }, { "version": "3.14.3S", "status": "affected" }, { "version": "3.14.4S", "status": "affected" }, { "version": "3.15.0S", "status": "affected" }, { "version": "3.15.1S", "status": "affected" }, { "version": "3.15.2S", "status": "affected" }, { "version": "3.15.1cS", "status": "affected" }, { "version": "3.15.3S", "status": "affected" }, { "version": "3.15.4S", "status": "affected" }, { "version": "3.7.0E", "status": "affected" }, { "version": "3.7.1E", "status": "affected" }, { "version": "3.7.2E", "status": "affected" }, { "version": "3.7.3E", "status": "affected" }, { "version": "3.7.4E", "status": "affected" }, { "version": "3.7.5E", "status": "affected" }, { "version": "3.5.0SQ", "status": "affected" }, { "version": "3.5.1SQ", "status": "affected" }, { "version": "3.5.2SQ", "status": "affected" }, { "version": "3.5.3SQ", "status": "affected" }, { "version": "3.5.4SQ", "status": "affected" }, { "version": "3.5.5SQ", "status": "affected" }, { "version": "3.5.6SQ", "status": "affected" }, { "version": "3.5.7SQ", "status": "affected" }, { "version": "3.5.8SQ", "status": "affected" }, { "version": "3.16.0S", "status": "affected" }, { "version": "3.16.1S", "status": "affected" }, { "version": "3.16.1aS", "status": "affected" }, { "version": "3.16.2S", "status": "affected" }, { "version": "3.16.2aS", "status": "affected" }, { "version": "3.16.0cS", "status": "affected" }, { "version": "3.16.3S", "status": "affected" }, { "version": "3.16.2bS", "status": "affected" }, { "version": "3.16.3aS", "status": "affected" }, { "version": "3.16.4S", "status": "affected" }, { "version": "3.16.4aS", "status": "affected" }, { "version": "3.16.4bS", "status": "affected" }, { "version": "3.16.5S", "status": "affected" }, { "version": "3.16.4dS", "status": "affected" }, { "version": "3.16.6S", "status": "affected" }, { "version": "3.16.7S", "status": "affected" }, { "version": "3.16.6bS", "status": "affected" }, { "version": "3.16.7aS", "status": "affected" }, { "version": "3.16.7bS", "status": "affected" }, { "version": "3.16.8S", "status": "affected" }, { "version": "3.16.9S", "status": "affected" }, { "version": "3.16.10S", "status": "affected" }, { "version": "3.17.0S", "status": "affected" }, { "version": "3.17.1S", "status": "affected" }, { "version": "3.17.2S", "status": "affected" }, { "version": "3.17.1aS", "status": "affected" }, { "version": "3.17.3S", "status": "affected" }, { "version": "3.17.4S", "status": "affected" }, { "version": "3.8.0E", "status": "affected" }, { "version": "3.8.1E", "status": "affected" }, { "version": "3.8.2E", "status": "affected" }, { "version": "3.8.3E", "status": "affected" }, { "version": "3.8.4E", "status": "affected" }, { "version": "3.8.5E", "status": "affected" }, { "version": "3.8.5aE", "status": "affected" }, { "version": "3.8.6E", "status": "affected" }, { "version": "3.8.7E", "status": "affected" }, { "version": "3.8.8E", "status": "affected" }, { "version": "3.8.9E", "status": "affected" }, { "version": "3.8.10E", "status": "affected" }, { "version": "3.18.0aS", "status": "affected" }, { "version": "3.18.0S", "status": "affected" }, { "version": "3.18.1S", "status": "affected" }, { "version": "3.18.2S", "status": "affected" }, { "version": "3.18.3S", "status": "affected" }, { "version": "3.18.4S", "status": "affected" }, { "version": "3.18.0SP", "status": "affected" }, { "version": "3.18.1SP", "status": "affected" }, { "version": "3.18.1aSP", "status": "affected" }, { "version": "3.18.1bSP", "status": "affected" }, { "version": "3.18.1cSP", "status": "affected" }, { "version": "3.18.2SP", "status": "affected" }, { "version": "3.18.2aSP", "status": "affected" }, { "version": "3.18.3SP", "status": "affected" }, { "version": "3.18.4SP", "status": "affected" }, { "version": "3.18.3aSP", "status": "affected" }, { "version": "3.18.3bSP", "status": "affected" }, { "version": "3.18.5SP", "status": "affected" }, { "version": "3.18.6SP", "status": "affected" }, { "version": "3.18.7SP", "status": "affected" }, { "version": "3.18.8aSP", "status": "affected" }, { "version": "3.18.9SP", "status": "affected" }, { "version": "3.9.0E", "status": "affected" }, { "version": "3.9.1E", "status": "affected" }, { "version": "3.9.2E", "status": "affected" }, { "version": "16.6.1", "status": "affected" }, { "version": "16.6.2", "status": "affected" }, { "version": "16.6.3", "status": "affected" }, { "version": "16.6.4", "status": "affected" }, { "version": "16.6.5", "status": "affected" }, { "version": "16.6.4a", "status": "affected" }, { "version": "16.6.5a", "status": "affected" }, { "version": "16.6.6", "status": "affected" }, { "version": "16.6.7", "status": "affected" }, { "version": "16.6.8", "status": "affected" }, { "version": "16.6.9", "status": "affected" }, { "version": "16.6.10", "status": "affected" }, { "version": "16.7.1", "status": "affected" }, { "version": "16.7.1a", "status": "affected" }, { "version": "16.7.1b", "status": "affected" }, { "version": "16.7.2", "status": "affected" }, { "version": "16.7.3", "status": "affected" }, { "version": "16.7.4", "status": "affected" }, { "version": "16.8.1", "status": "affected" }, { "version": "16.8.1a", "status": "affected" }, { "version": "16.8.1b", "status": "affected" }, { "version": "16.8.1s", "status": "affected" }, { "version": "16.8.1c", "status": "affected" }, { "version": "16.8.1d", "status": "affected" }, { "version": "16.8.2", "status": "affected" }, { "version": "16.8.1e", "status": "affected" }, { "version": "16.8.3", "status": "affected" }, { "version": "16.9.1", "status": "affected" }, { "version": "16.9.2", "status": "affected" }, { "version": "16.9.1a", "status": "affected" }, { "version": "16.9.1b", "status": "affected" }, { "version": "16.9.1s", "status": "affected" }, { "version": "16.9.3", "status": "affected" }, { "version": "16.9.4", "status": "affected" }, { "version": "16.9.3a", "status": "affected" }, { "version": "16.9.5", "status": "affected" }, { "version": "16.9.5f", "status": "affected" }, { "version": "16.9.6", "status": "affected" }, { "version": "16.9.7", "status": "affected" }, { "version": "16.9.8", "status": "affected" }, { "version": "16.10.1", "status": "affected" }, { "version": "16.10.1a", "status": "affected" }, { "version": "16.10.1b", "status": "affected" }, { "version": "16.10.1s", "status": "affected" }, { "version": "16.10.1c", "status": "affected" }, { "version": "16.10.1e", "status": "affected" }, { "version": "16.10.1d", "status": "affected" }, { "version": "16.10.2", "status": "affected" }, { "version": "16.10.1f", "status": "affected" }, { "version": "16.10.1g", "status": "affected" }, { "version": "16.10.3", "status": "affected" }, { "version": "3.10.0E", "status": "affected" }, { "version": "3.10.1E", "status": "affected" }, { "version": "3.10.0cE", "status": "affected" }, { "version": "3.10.2E", "status": "affected" }, { "version": "3.10.3E", "status": "affected" }, { "version": "16.11.1", "status": "affected" }, { "version": "16.11.1a", "status": "affected" }, { "version": "16.11.1b", "status": "affected" }, { "version": "16.11.2", "status": "affected" }, { "version": "16.11.1s", "status": "affected" }, { "version": "16.12.1", "status": "affected" }, { "version": "16.12.1s", "status": "affected" }, { "version": "16.12.1a", "status": "affected" }, { "version": "16.12.1c", "status": "affected" }, { "version": "16.12.1w", "status": "affected" }, { "version": "16.12.2", "status": "affected" }, { "version": "16.12.1y", "status": "affected" }, { "version": "16.12.2a", "status": "affected" }, { "version": "16.12.3", "status": "affected" }, { "version": "16.12.8", "status": "affected" }, { "version": "16.12.2s", "status": "affected" }, { "version": "16.12.1x", "status": "affected" }, { "version": "16.12.1t", "status": "affected" }, { "version": "16.12.4", "status": "affected" }, { "version": "16.12.3s", "status": "affected" }, { "version": "16.12.3a", "status": "affected" }, { "version": "16.12.4a", "status": "affected" }, { "version": "16.12.5", "status": "affected" }, { "version": "16.12.6", "status": "affected" }, { "version": "16.12.1z1", "status": "affected" }, { "version": "16.12.5a", "status": "affected" }, { "version": "16.12.5b", "status": "affected" }, { "version": "16.12.1z2", "status": "affected" }, { "version": "16.12.6a", "status": "affected" }, { "version": "16.12.7", "status": "affected" }, { "version": "16.12.9", "status": "affected" }, { "version": "16.12.10", "status": "affected" }, { "version": "16.12.10a", "status": "affected" }, { "version": "16.12.11", "status": "affected" }, { "version": "16.12.12", "status": "affected" }, { "version": "16.12.13", "status": "affected" }, { "version": "3.11.0E", "status": "affected" }, { "version": "3.11.1E", "status": "affected" }, { "version": "3.11.2E", "status": "affected" }, { "version": "3.11.3E", "status": "affected" }, { "version": "3.11.1aE", "status": "affected" }, { "version": "3.11.4E", "status": "affected" }, { "version": "3.11.3aE", "status": "affected" }, { "version": "3.11.5E", "status": "affected" }, { "version": "3.11.6E", "status": "affected" }, { "version": "3.11.7E", "status": "affected" }, { "version": "3.11.8E", "status": "affected" }, { "version": "3.11.9E", "status": "affected" }, { "version": "3.11.10E", "status": "affected" }, { "version": "3.11.11E", "status": "affected" }, { "version": "3.11.12E", "status": "affected" }, { "version": "17.1.1", "status": "affected" }, { "version": "17.1.1a", "status": "affected" }, { "version": "17.1.1s", "status": "affected" }, { "version": "17.1.1t", "status": "affected" }, { "version": "17.1.3", "status": "affected" }, { "version": "17.2.1", "status": "affected" }, { "version": "17.2.1r", "status": "affected" }, { "version": "17.2.1a", "status": "affected" }, { "version": "17.2.1v", "status": "affected" }, { "version": "17.2.2", "status": "affected" }, { "version": "17.2.3", "status": "affected" }, { "version": "17.3.1", "status": "affected" }, { "version": "17.3.2", "status": "affected" }, { "version": "17.3.3", "status": "affected" }, { "version": "17.3.1a", "status": "affected" }, { "version": "17.3.1w", "status": "affected" }, { "version": "17.3.2a", "status": "affected" }, { "version": "17.3.1x", "status": "affected" }, { "version": "17.3.1z", "status": "affected" }, { "version": "17.3.4", "status": "affected" }, { "version": "17.3.5", "status": "affected" }, { "version": "17.3.4a", "status": "affected" }, { "version": "17.3.6", "status": "affected" }, { "version": "17.3.4b", "status": "affected" }, { "version": "17.3.4c", "status": "affected" }, { "version": "17.3.5a", "status": "affected" }, { "version": "17.3.5b", "status": "affected" }, { "version": "17.3.7", "status": "affected" }, { "version": "17.3.8", "status": "affected" }, { "version": "17.3.8a", "status": "affected" }, { "version": "17.4.1", "status": "affected" }, { "version": "17.4.2", "status": "affected" }, { "version": "17.4.1a", "status": "affected" }, { "version": "17.4.1b", "status": "affected" }, { "version": "17.4.2a", "status": "affected" }, { "version": "17.5.1", "status": "affected" }, { "version": "17.5.1a", "status": "affected" }, { "version": "17.6.1", "status": "affected" }, { "version": "17.6.2", "status": "affected" }, { "version": "17.6.1w", "status": "affected" }, { "version": "17.6.1a", "status": "affected" }, { "version": "17.6.1x", "status": "affected" }, { "version": "17.6.3", "status": "affected" }, { "version": "17.6.1y", "status": "affected" }, { "version": "17.6.1z", "status": "affected" }, { "version": "17.6.3a", "status": "affected" }, { "version": "17.6.4", "status": "affected" }, { "version": "17.6.1z1", "status": "affected" }, { "version": "17.6.5", "status": "affected" }, { "version": "17.6.6", "status": "affected" }, { "version": "17.6.6a", "status": "affected" }, { "version": "17.6.5a", "status": "affected" }, { "version": "17.6.7", "status": "affected" }, { "version": "17.6.8", "status": "affected" }, { "version": "17.6.8a", "status": "affected" }, { "version": "17.7.1", "status": "affected" }, { "version": "17.7.1a", "status": "affected" }, { "version": "17.7.1b", "status": "affected" }, { "version": "17.7.2", "status": "affected" }, { "version": "17.10.1", "status": "affected" }, { "version": "17.10.1a", "status": "affected" }, { "version": "17.10.1b", "status": "affected" }, { "version": "17.8.1", "status": "affected" }, { "version": "17.8.1a", "status": "affected" }, { "version": "17.9.1", "status": "affected" }, { "version": "17.9.1w", "status": "affected" }, { "version": "17.9.2", "status": "affected" }, { "version": "17.9.1a", "status": "affected" }, { "version": "17.9.1x", "status": "affected" }, { "version": "17.9.1y", "status": "affected" }, { "version": "17.9.3", "status": "affected" }, { "version": "17.9.2a", "status": "affected" }, { "version": "17.9.1x1", "status": "affected" }, { "version": "17.9.3a", "status": "affected" }, { "version": "17.9.4", "status": "affected" }, { "version": "17.9.1y1", "status": "affected" }, { "version": "17.9.5", "status": "affected" }, { "version": "17.9.4a", "status": "affected" }, { "version": "17.9.5a", "status": "affected" }, { "version": "17.9.5b", "status": "affected" }, { "version": "17.9.6", "status": "affected" }, { "version": "17.9.6a", "status": "affected" }, { "version": "17.9.7", "status": "affected" }, { "version": "17.9.5e", "status": "affected" }, { "version": "17.9.5f", "status": "affected" }, { "version": "17.9.7a", "status": "affected" }, { "version": "17.9.7b", "status": "affected" }, { "version": "17.11.1", "status": "affected" }, { "version": "17.11.1a", "status": "affected" }, { "version": "17.12.1", "status": "affected" }, { "version": "17.12.1w", "status": "affected" }, { "version": "17.12.1a", "status": "affected" }, { "version": "17.12.1x", "status": "affected" }, { "version": "17.12.2", "status": "affected" }, { "version": "17.12.3", "status": "affected" }, { "version": "17.12.2a", "status": "affected" }, { "version": "17.12.1y", "status": "affected" }, { "version": "17.12.1z", "status": "affected" }, { "version": "17.12.4", "status": "affected" }, { "version": "17.12.3a", "status": "affected" }, { "version": "17.12.1z1", "status": "affected" }, { "version": "17.12.1z2", "status": "affected" }, { "version": "17.12.4a", "status": "affected" }, { "version": "17.12.5", "status": "affected" }, { "version": "17.12.4b", "status": "affected" }, { "version": "17.12.1z3", "status": "affected" }, { "version": "17.12.5a", "status": "affected" }, { "version": "17.12.1z4", "status": "affected" }, { "version": "17.12.5b", "status": "affected" }, { "version": "17.12.5c", "status": "affected" }, { "version": "17.13.1", "status": "affected" }, { "version": "17.13.1a", "status": "affected" }, { "version": "17.14.1", "status": "affected" }, { "version": "17.14.1a", "status": "affected" }, { "version": "17.15.1", "status": "affected" }, { "version": "17.15.1w", "status": "affected" }, { "version": "17.15.1a", "status": "affected" }, { "version": "17.15.2", "status": "affected" }, { "version": "17.15.1b", "status": "affected" }, { "version": "17.15.1x", "status": "affected" }, { "version": "17.15.1z", "status": "affected" }, { "version": "17.15.3", "status": "affected" }, { "version": "17.15.2c", "status": "affected" }, { "version": "17.15.2a", "status": "affected" }, { "version": "17.15.1y", "status": "affected" }, { "version": "17.15.2b", "status": "affected" }, { "version": "17.15.3a", "status": "affected" }, { "version": "17.15.4", "status": "affected" }, { "version": "17.15.3b", "status": "affected" }, { "version": "17.16.1", "status": "affected" }, { "version": "17.16.1a", "status": "affected" }, { "version": "17.17.1", "status": "affected" }, { "version": "17.18.1", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco IOS XE Catalyst SD-WAN", "versions": [ { "version": "16.9.1", "status": "affected" }, { "version": "16.9.2", "status": "affected" }, { "version": "16.9.3", "status": "affected" }, { "version": "16.9.4", "status": "affected" }, { "version": "16.10.1", "status": "affected" }, { "version": "16.10.2", "status": "affected" }, { "version": "16.10.3", "status": "affected" }, { "version": "16.10.3a", "status": "affected" }, { "version": "16.10.3b", "status": "affected" }, { "version": "16.10.4", "status": "affected" }, { "version": "16.10.5", "status": "affected" }, { "version": "16.10.6", "status": "affected" }, { "version": "16.11.1a", "status": "affected" }, { "version": "16.12.1b", "status": "affected" }, { "version": "16.12.1d", "status": "affected" }, { "version": "16.12.1e", "status": "affected" }, { "version": "16.12.2r", "status": "affected" }, { "version": "16.12.3", "status": "affected" }, { "version": "16.12.4", "status": "affected" }, { "version": "16.12.4a", "status": "affected" }, { "version": "16.12.5", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-20352", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "fetchedAt": "2026-10-24T04:41:40.388Z", "publishedAt": "2025-09-24T17:10:42.891Z", "modifiedAt": "2026-02-26T17:48:03.098Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:\r\n\r \r An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. \r An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. \r \r An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. \r\n\r This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.\r\n\r Note: This vulnerability affects all versions of SNMP.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "IOS", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "12.2(55)SE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "12.2(55)SE3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "12.2(55)SE2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "12.2(58)SE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "12.2(55)SE1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "12.2(58)SE1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "12.2(55)SE4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "12.2(58)SE2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "12.2(55)SE5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "12.2(55)SE6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "12.2(55)SE7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "12.2(55)SE8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "12.2(55)SE9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "12.2(55)SE10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "12.2(55)SE11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "12.2(55)SE12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "12.2(55)SE13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "12.2(58)EZ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "12.2(53)EZ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "12.2(55)EZ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "12.2(60)EZ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "12.2(60)EZ1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "12.2(60)EZ2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "12.2(60)EZ3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "12.2(60)EZ4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "12.2(60)EZ5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "12.2(60)EZ6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "12.2(60)EZ7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "12.2(60)EZ8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "12.2(60)EZ9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "12.2(60)EZ10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "12.2(60)EZ11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "12.2(60)EZ12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "12.2(60)EZ13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "12.2(60)EZ14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "12.2(60)EZ15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "12.2(33)SXI2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "12.2(33)SXI3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "12.2(33)SXI5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "12.2(33)SXI4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "12.2(33)SXI4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "12.2(33)SXI2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "12.2(33)SXI", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "12.2(33)SXI6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "12.2(33)SXI7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "12.2(33)SXI1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "12.2(33)SXI8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "12.2(33)SXI9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "12.2(33)SXI8a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "12.2(33)SXI10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "12.2(33)SXI11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "12.2(33)SXI12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "12.2(33)SXI13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "12.2(33)SXI14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "12.2(50)SQ2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "12.2(50)SQ1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "12.2(50)SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "12.2(50)SQ3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "12.2(50)SQ4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "12.2(50)SQ5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "12.2(50)SQ6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "12.2(50)SQ7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "15.3(1)T", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "15.3(2)T", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "15.3(1)T1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "15.3(1)T2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "15.3(1)T3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "15.3(1)T4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "15.3(2)T1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "15.3(2)T2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "15.3(2)T3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "15.3(2)T4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "15.0(1)EY", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "15.0(1)EY1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "15.0(1)EY2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "15.0(2)EY", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "15.0(2)EY1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "15.0(2)EY2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "15.0(2)EY3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "15.0(1)SE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "15.0(2)SE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "15.0(1)SE1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "15.0(1)SE2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "15.0(1)SE3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "15.0(2)SE1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "15.0(2)SE2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "15.0(2)SE3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "15.0(2)SE4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "15.0(2)SE5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "15.0(2)SE6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "15.0(2)SE7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "15.0(2)SE8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "15.0(2)SE9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "15.0(2)SE10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "15.0(2)SE11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "15.0(2)SE10a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "15.0(2)SE12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "15.0(2)SE13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "15.0(1)SY", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "15.0(1)SY1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "15.0(1)SY2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "15.0(1)SY3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "15.0(1)SY4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "15.0(1)SY5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "15.0(1)SY6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "15.0(1)SY7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "15.0(1)SY8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "15.0(1)SY7a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "15.0(1)SY9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "15.0(1)SY10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "12.2(33)SXJ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "12.2(33)SXJ1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "12.2(33)SXJ2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "12.2(33)SXJ3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "12.2(33)SXJ4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "12.2(33)SXJ5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "12.2(33)SXJ6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "12.2(33)SXJ7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "12.2(33)SXJ8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "12.2(33)SXJ9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "12.2(33)SXJ10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "15.1(1)SG", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "15.1(2)SG", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "15.1(1)SG1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "15.1(1)SG2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "15.1(2)SG1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "15.1(2)SG2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "15.1(2)SG3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "15.1(2)SG4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "15.1(2)SG5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "15.1(2)SG6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "15.1(2)SG7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "15.1(2)SG8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "15.2(4)M", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "15.2(4)M1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "15.2(4)M2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "15.2(4)M4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "15.2(4)M3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "15.2(4)M5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "15.2(4)M8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "15.2(4)M10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "15.2(4)M7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "15.2(4)M6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "15.2(4)M9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "15.2(4)M6a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "15.2(4)M11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "15.0(2)SG", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "15.0(2)SG1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "15.0(2)SG2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "15.0(2)SG3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "15.0(2)SG4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "15.0(2)SG5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "15.0(2)SG6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "15.0(2)SG7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "15.0(2)SG8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "15.0(2)SG9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "15.0(2)SG10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "15.0(2)SG11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "15.2(2)GC", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "15.2(3)GC", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "15.2(3)GC1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "15.2(4)GC", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "15.2(4)GC1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "15.2(4)GC2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "15.2(4)GC3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "15.1(1)SY", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "15.1(1)SY1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "15.1(2)SY", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "15.1(2)SY1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "15.1(2)SY2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "15.1(1)SY2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "15.1(1)SY3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "15.1(2)SY3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "15.1(1)SY4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "15.1(2)SY4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "15.1(1)SY5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "15.1(2)SY5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "15.1(2)SY4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "15.1(1)SY6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "15.1(2)SY6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "15.1(2)SY7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "15.1(2)SY8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "15.1(2)SY9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "15.1(2)SY10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "15.1(2)SY11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "15.1(2)SY12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "15.1(2)SY13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "15.1(2)SY14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "15.1(2)SY15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "15.1(2)SY16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "15.4(1)T", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "15.4(2)T", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "15.4(1)T2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "15.4(1)T1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "15.4(1)T3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "15.4(2)T1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "15.4(2)T3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "15.4(2)T2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "15.4(1)T4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "15.4(2)T4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "15.0(2)EA", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "15.0(2)EA1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "15.2(1)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "15.2(2)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "15.2(1)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "15.2(3)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "15.2(1)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "15.2(1)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "15.2(2)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "15.2(4)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "15.2(3)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "15.2(2)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "15.2(2a)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "15.2(2)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "15.2(2a)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "15.2(3)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "15.2(3a)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "15.2(3)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "15.2(4)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "15.2(2)E4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "15.2(2)E5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "15.2(4)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "15.2(3)E4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "15.2(5)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "15.2(4)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "15.2(2)E6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "15.2(5a)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "15.2(5)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "15.2(5b)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "15.2(2)E5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "15.2(5c)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "15.2(2)E5b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "15.2(5a)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "15.2(4)E4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "15.2(2)E7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/235", "version": "15.2(5)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/236", "version": "15.2(6)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/237", "version": "15.2(4)E5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/238", "version": "15.2(5)E2c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/239", "version": "15.2(2)E8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/240", "version": "15.2(6)E0a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/241", "version": "15.2(6)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/242", "version": "15.2(6)E0c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/243", "version": "15.2(4)E6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/244", "version": "15.2(6)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/245", "version": "15.2(2)E9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/246", "version": "15.2(4)E7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/247", "version": "15.2(7)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/248", "version": "15.2(2)E10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/249", "version": "15.2(4)E8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/250", "version": "15.2(6)E2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/251", "version": "15.2(6)E2b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/252", "version": "15.2(7)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/253", "version": "15.2(7)E0a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/254", "version": "15.2(7)E0b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/255", "version": "15.2(7)E0s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/256", "version": "15.2(6)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/257", "version": "15.2(4)E9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/258", "version": "15.2(7)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/259", "version": "15.2(7a)E0b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/260", "version": "15.2(4)E10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/261", "version": "15.2(7)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/262", "version": "15.2(7)E1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/263", "version": "15.2(7b)E0b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/264", "version": "15.2(7)E2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/265", "version": "15.2(4)E10a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/266", "version": "15.2(7)E4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/267", "version": "15.2(7)E3k", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/268", "version": "15.2(8)E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/269", "version": "15.2(8)E1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/270", "version": "15.2(7)E5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/271", "version": "15.2(7)E6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/272", "version": "15.2(8)E2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/273", "version": "15.2(4)E10d", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/274", "version": "15.2(7)E7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/275", "version": "15.2(8)E3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/276", "version": "15.2(7)E8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/277", "version": "15.2(8)E4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/278", "version": "15.2(7)E9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/279", "version": "15.2(8)E5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/280", "version": "15.2(8)E6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/281", "version": "15.2(7)E10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/282", "version": "15.2(7)E11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/283", "version": "15.2(8)E7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/284", "version": "15.2(7)E12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/285", "version": "15.2(2)JB", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/286", "version": "15.2(2)JB2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/287", "version": "15.2(4)JB", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/288", "version": "15.2(2)JB3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/289", "version": "15.2(4)JB1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/290", "version": "15.2(4)JB2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/291", "version": "15.2(4)JB3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/292", "version": "15.2(4)JB3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/293", "version": "15.2(2)JB4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/294", "version": "15.2(4)JB4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/295", "version": "15.2(4)JB3h", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/296", "version": "15.2(4)JB3b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/297", "version": "15.2(4)JB5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/298", "version": "15.2(4)JB6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/299", "version": "15.2(2)JB5", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco IOS XE Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "3.5.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "3.5.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "3.5.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "3.5.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "3.6.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "3.6.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "3.6.2aE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "3.6.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "3.6.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "3.6.4E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "3.6.5E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "3.6.6E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "3.6.5aE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "3.6.7E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "3.6.8E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "3.6.7bE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "3.6.9E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "3.6.10E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "3.14.0S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "3.14.1S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "3.14.2S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "3.14.3S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "3.14.4S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "3.15.0S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "3.15.1S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "3.15.2S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "3.15.1cS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "3.15.3S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "3.15.4S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "3.7.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "3.7.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "3.7.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "3.7.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "3.7.4E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "3.7.5E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "3.5.0SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "3.5.1SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "3.5.2SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "3.5.3SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "3.5.4SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "3.5.5SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "3.5.6SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "3.5.7SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "3.5.8SQ", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "3.16.0S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "3.16.1S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "3.16.1aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "3.16.2S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "3.16.2aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "3.16.0cS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "3.16.3S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "3.16.2bS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "3.16.3aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "3.16.4S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "3.16.4aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "3.16.4bS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "3.16.5S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "3.16.4dS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "3.16.6S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "3.16.7S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "3.16.6bS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "3.16.7aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "3.16.7bS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "3.16.8S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "3.16.9S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "3.16.10S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "3.17.0S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "3.17.1S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "3.17.2S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "3.17.1aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "3.17.3S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "3.17.4S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "3.8.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "3.8.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "3.8.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "3.8.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "3.8.4E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "3.8.5E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "3.8.5aE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "3.8.6E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/80", "version": "3.8.7E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/81", "version": "3.8.8E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/82", "version": "3.8.9E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/83", "version": "3.8.10E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/84", "version": "3.18.0aS", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/85", "version": "3.18.0S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/86", "version": "3.18.1S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/87", "version": "3.18.2S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/88", "version": "3.18.3S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/89", "version": "3.18.4S", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/90", "version": "3.18.0SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/91", "version": "3.18.1SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/92", "version": "3.18.1aSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/93", "version": "3.18.1bSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/94", "version": "3.18.1cSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/95", "version": "3.18.2SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/96", "version": "3.18.2aSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/97", "version": "3.18.3SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/98", "version": "3.18.4SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/99", "version": "3.18.3aSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/100", "version": "3.18.3bSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/101", "version": "3.18.5SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/102", "version": "3.18.6SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/103", "version": "3.18.7SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/104", "version": "3.18.8aSP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/105", "version": "3.18.9SP", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/106", "version": "3.9.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/107", "version": "3.9.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/108", "version": "3.9.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/109", "version": "16.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/110", "version": "16.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/111", "version": "16.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/112", "version": "16.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/113", "version": "16.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/114", "version": "16.6.4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/115", "version": "16.6.5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/116", "version": "16.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/117", "version": "16.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/118", "version": "16.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/119", "version": "16.6.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/120", "version": "16.6.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/121", "version": "16.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/122", "version": "16.7.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/123", "version": "16.7.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/124", "version": "16.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/125", "version": "16.7.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/126", "version": "16.7.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/127", "version": "16.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/128", "version": "16.8.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/129", "version": "16.8.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/130", "version": "16.8.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/131", "version": "16.8.1c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/132", "version": "16.8.1d", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/133", "version": "16.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/134", "version": "16.8.1e", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/135", "version": "16.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/136", "version": "16.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/137", "version": "16.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/138", "version": "16.9.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/139", "version": "16.9.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/140", "version": "16.9.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/141", "version": "16.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/142", "version": "16.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/143", "version": "16.9.3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/144", "version": "16.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/145", "version": "16.9.5f", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/146", "version": "16.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/147", "version": "16.9.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/148", "version": "16.9.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/149", "version": "16.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/150", "version": "16.10.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/151", "version": "16.10.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/152", "version": "16.10.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/153", "version": "16.10.1c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/154", "version": "16.10.1e", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/155", "version": "16.10.1d", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/156", "version": "16.10.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/157", "version": "16.10.1f", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/158", "version": "16.10.1g", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/159", "version": "16.10.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/160", "version": "3.10.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/161", "version": "3.10.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/162", "version": "3.10.0cE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/163", "version": "3.10.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/164", "version": "3.10.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/165", "version": "16.11.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/166", "version": "16.11.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/167", "version": "16.11.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/168", "version": "16.11.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/169", "version": "16.11.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/170", "version": "16.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/171", "version": "16.12.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/172", "version": "16.12.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/173", "version": "16.12.1c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/174", "version": "16.12.1w", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/175", "version": "16.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/176", "version": "16.12.1y", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/177", "version": "16.12.2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/178", "version": "16.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/179", "version": "16.12.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/180", "version": "16.12.2s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/181", "version": "16.12.1x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/182", "version": "16.12.1t", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/183", "version": "16.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/184", "version": "16.12.3s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/185", "version": "16.12.3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/186", "version": "16.12.4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/187", "version": "16.12.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/188", "version": "16.12.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/189", "version": "16.12.1z1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/190", "version": "16.12.5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/191", "version": "16.12.5b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/192", "version": "16.12.1z2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/193", "version": "16.12.6a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/194", "version": "16.12.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/195", "version": "16.12.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/196", "version": "16.12.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/197", "version": "16.12.10a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/198", "version": "16.12.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/199", "version": "16.12.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/200", "version": "16.12.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/201", "version": "3.11.0E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/202", "version": "3.11.1E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/203", "version": "3.11.2E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/204", "version": "3.11.3E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/205", "version": "3.11.1aE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/206", "version": "3.11.4E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/207", "version": "3.11.3aE", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/208", "version": "3.11.5E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/209", "version": "3.11.6E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/210", "version": "3.11.7E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/211", "version": "3.11.8E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/212", "version": "3.11.9E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/213", "version": "3.11.10E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/214", "version": "3.11.11E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/215", "version": "3.11.12E", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/216", "version": "17.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/217", "version": "17.1.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/218", "version": "17.1.1s", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/219", "version": "17.1.1t", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/220", "version": "17.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/221", "version": "17.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/222", "version": "17.2.1r", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/223", "version": "17.2.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/224", "version": "17.2.1v", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/225", "version": "17.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/226", "version": "17.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/227", "version": "17.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/228", "version": "17.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/229", "version": "17.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/230", "version": "17.3.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/231", "version": "17.3.1w", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/232", "version": "17.3.2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/233", "version": "17.3.1x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/234", "version": "17.3.1z", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/235", "version": "17.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/236", "version": "17.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/237", "version": "17.3.4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/238", "version": "17.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/239", "version": "17.3.4b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/240", "version": "17.3.4c", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/241", "version": "17.3.5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/242", "version": "17.3.5b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/243", "version": "17.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/244", "version": "17.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/245", "version": "17.3.8a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/246", "version": "17.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/247", "version": "17.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/248", "version": "17.4.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/249", "version": "17.4.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/250", "version": "17.4.2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/251", "version": "17.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/252", "version": "17.5.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/253", "version": "17.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/254", "version": "17.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/255", "version": "17.6.1w", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/256", "version": "17.6.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/257", "version": "17.6.1x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/258", "version": "17.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/259", "version": "17.6.1y", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/260", "version": "17.6.1z", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/261", "version": "17.6.3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/262", "version": "17.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/263", "version": "17.6.1z1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/264", "version": "17.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/265", "version": "17.6.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/266", "version": "17.6.6a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/267", "version": "17.6.5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/268", "version": "17.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/269", "version": "17.6.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/270", "version": "17.6.8a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/271", "version": "17.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/272", "version": "17.7.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/273", "version": "17.7.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/274", "version": "17.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/275", "version": "17.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/276", "version": "17.10.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/277", "version": "17.10.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/278", "version": "17.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/279", "version": "17.8.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/280", "version": "17.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/281", "version": "17.9.1w", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/282", "version": "17.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/283", "version": "17.9.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/284", "version": "17.9.1x", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/285", "version": "17.9.1y", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/286", "version": "17.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/287", "version": "17.9.2a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/288", "version": "17.9.1x1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/289", "version": "17.9.3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/290", "version": "17.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/291", "version": "17.9.1y1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/292", "version": "17.9.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/293", "version": "17.9.4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/294", "version": "17.9.5a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/295", "version": "17.9.5b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/296", "version": "17.9.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/297", "version": "17.9.6a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/298", "version": "17.9.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/299", "version": "17.9.5e", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco IOS XE Catalyst SD-WAN", "sourcePath": "/containers/cna/affected/2", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "16.9.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "16.9.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/2", "version": "16.9.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/3", "version": "16.9.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/4", "version": "16.10.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/5", "version": "16.10.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/6", "version": "16.10.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/7", "version": "16.10.3a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/8", "version": "16.10.3b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/9", "version": "16.10.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/10", "version": "16.10.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/11", "version": "16.10.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/12", "version": "16.11.1a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/13", "version": "16.12.1b", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/14", "version": "16.12.1d", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/15", "version": "16.12.1e", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/16", "version": "16.12.2r", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/17", "version": "16.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/18", "version": "16.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/19", "version": "16.12.4a", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/20", "version": "16.12.5", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) became aware of successful exploitation of this vulnerability in the wild after local Administrator credentials were compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-121", "lang": "en", "description": "Stack-based Buffer Overflow", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 7.7, "baseSeverity": "HIGH", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "label": "cisco-sa-snmp-x4LPhte", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20352", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"IOS\",\"versions\":[{\"version\":\"12.2(55)SE\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE3\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE2\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE1\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE1\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE4\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE2\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE5\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE6\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE7\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE8\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE9\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE10\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE11\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE12\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE13\",\"status\":\"affected\"},{\"version\":\"12.2(58)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(53)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(55)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ1\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ2\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ3\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ4\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ5\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ6\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ7\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ8\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ9\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ10\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ11\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ12\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ13\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ14\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ15\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI2\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI3\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI5\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI4a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI4\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI2a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI6\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI7\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI1\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI8\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI9\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI8a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI10\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI11\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI12\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI13\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI14\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ2\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ1\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ3\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ4\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ5\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ6\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ7\",\"status\":\"affected\"},{\"version\":\"15.3(1)T\",\"status\":\"affected\"},{\"version\":\"15.3(2)T\",\"status\":\"affected\"},{\"version\":\"15.3(1)T1\",\"status\":\"affected\"},{\"version\":\"15.3(1)T2\",\"status\":\"affected\"},{\"version\":\"15.3(1)T3\",\"status\":\"affected\"},{\"version\":\"15.3(1)T4\",\"status\":\"affected\"},{\"version\":\"15.3(2)T1\",\"status\":\"affected\"},{\"version\":\"15.3(2)T2\",\"status\":\"affected\"},{\"version\":\"15.3(2)T3\",\"status\":\"affected\"},{\"version\":\"15.3(2)T4\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY1\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY2\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY1\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY2\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY3\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE1\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE2\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE1\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE2\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE4\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE5\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE6\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE7\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE8\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE9\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE10\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE11\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE10a\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE12\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE13\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY7\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY8\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY7a\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY9\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY10\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ1\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ2\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ3\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ4\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ5\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ6\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ7\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ8\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ9\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ10\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG1\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG2\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG2\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG3\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG4\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG7\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG8\",\"status\":\"affected\"},{\"version\":\"15.2(4)M\",\"status\":\"affected\"},{\"version\":\"15.2(4)M1\",\"status\":\"affected\"},{\"version\":\"15.2(4)M2\",\"status\":\"affected\"},{\"version\":\"15.2(4)M4\",\"status\":\"affected\"},{\"version\":\"15.2(4)M3\",\"status\":\"affected\"},{\"version\":\"15.2(4)M5\",\"status\":\"affected\"},{\"version\":\"15.2(4)M8\",\"status\":\"affected\"},{\"version\":\"15.2(4)M10\",\"status\":\"affected\"},{\"version\":\"15.2(4)M7\",\"status\":\"affected\"},{\"version\":\"15.2(4)M6\",\"status\":\"affected\"},{\"version\":\"15.2(4)M9\",\"status\":\"affected\"},{\"version\":\"15.2(4)M6a\",\"status\":\"affected\"},{\"version\":\"15.2(4)M11\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG1\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG2\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG4\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG5\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG6\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG7\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG8\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG9\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG10\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG11\",\"status\":\"affected\"},{\"version\":\"15.2(2)GC\",\"status\":\"affected\"},{\"version\":\"15.2(3)GC\",\"status\":\"affected\"},{\"version\":\"15.2(3)GC1\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC1\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC2\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC3\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY2\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY3\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY4\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY4a\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY7\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY8\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY9\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY10\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY11\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY12\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY13\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY14\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY15\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY16\",\"status\":\"affected\"},{\"version\":\"15.4(1)T\",\"status\":\"affected\"},{\"version\":\"15.4(2)T\",\"status\":\"affected\"},{\"version\":\"15.4(1)T2\",\"status\":\"affected\"},{\"version\":\"15.4(1)T1\",\"status\":\"affected\"},{\"version\":\"15.4(1)T3\",\"status\":\"affected\"},{\"version\":\"15.4(2)T1\",\"status\":\"affected\"},{\"version\":\"15.4(2)T3\",\"status\":\"affected\"},{\"version\":\"15.4(2)T2\",\"status\":\"affected\"},{\"version\":\"15.4(1)T4\",\"status\":\"affected\"},{\"version\":\"15.4(2)T4\",\"status\":\"affected\"},{\"version\":\"15.0(2)EA\",\"status\":\"affected\"},{\"version\":\"15.0(2)EA1\",\"status\":\"affected\"},{\"version\":\"15.2(1)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E\",\"status\":\"affected\"},{\"version\":\"15.2(1)E1\",\"status\":\"affected\"},{\"version\":\"15.2(3)E\",\"status\":\"affected\"},{\"version\":\"15.2(1)E2\",\"status\":\"affected\"},{\"version\":\"15.2(1)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2)E1\",\"status\":\"affected\"},{\"version\":\"15.2(4)E\",\"status\":\"affected\"},{\"version\":\"15.2(3)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E2\",\"status\":\"affected\"},{\"version\":\"15.2(2a)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2a)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3a)E\",\"status\":\"affected\"},{\"version\":\"15.2(3)E3\",\"status\":\"affected\"},{\"version\":\"15.2(4)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E4\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5\",\"status\":\"affected\"},{\"version\":\"15.2(4)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3)E4\",\"status\":\"affected\"},{\"version\":\"15.2(5)E\",\"status\":\"affected\"},{\"version\":\"15.2(4)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2)E6\",\"status\":\"affected\"},{\"version\":\"15.2(5a)E\",\"status\":\"affected\"},{\"version\":\"15.2(5)E1\",\"status\":\"affected\"},{\"version\":\"15.2(5b)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5a\",\"status\":\"affected\"},{\"version\":\"15.2(5c)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5b\",\"status\":\"affected\"},{\"version\":\"15.2(5a)E1\",\"status\":\"affected\"},{\"version\":\"15.2(4)E4\",\"status\":\"affected\"},{\"version\":\"15.2(2)E7\",\"status\":\"affected\"},{\"version\":\"15.2(5)E2\",\"status\":\"affected\"},{\"version\":\"15.2(6)E\",\"status\":\"affected\"},{\"version\":\"15.2(4)E5\",\"status\":\"affected\"},{\"version\":\"15.2(5)E2c\",\"status\":\"affected\"},{\"version\":\"15.2(2)E8\",\"status\":\"affected\"},{\"version\":\"15.2(6)E0a\",\"status\":\"affected\"},{\"version\":\"15.2(6)E1\",\"status\":\"affected\"},{\"version\":\"15.2(6)E0c\",\"status\":\"affected\"},{\"version\":\"15.2(4)E6\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2\",\"status\":\"affected\"},{\"version\":\"15.2(2)E9\",\"status\":\"affected\"},{\"version\":\"15.2(4)E7\",\"status\":\"affected\"},{\"version\":\"15.2(7)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E10\",\"status\":\"affected\"},{\"version\":\"15.2(4)E8\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2a\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E1\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0a\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0s\",\"status\":\"affected\"},{\"version\":\"15.2(6)E3\",\"status\":\"affected\"},{\"version\":\"15.2(4)E9\",\"status\":\"affected\"},{\"version\":\"15.2(7)E2\",\"status\":\"affected\"},{\"version\":\"15.2(7a)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10\",\"status\":\"affected\"},{\"version\":\"15.2(7)E3\",\"status\":\"affected\"},{\"version\":\"15.2(7)E1a\",\"status\":\"affected\"},{\"version\":\"15.2(7b)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E2a\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10a\",\"status\":\"affected\"},{\"version\":\"15.2(7)E4\",\"status\":\"affected\"},{\"version\":\"15.2(7)E3k\",\"status\":\"affected\"},{\"version\":\"15.2(8)E\",\"status\":\"affected\"},{\"version\":\"15.2(8)E1\",\"status\":\"affected\"},{\"version\":\"15.2(7)E5\",\"status\":\"affected\"},{\"version\":\"15.2(7)E6\",\"status\":\"affected\"},{\"version\":\"15.2(8)E2\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10d\",\"status\":\"affected\"},{\"version\":\"15.2(7)E7\",\"status\":\"affected\"},{\"version\":\"15.2(8)E3\",\"status\":\"affected\"},{\"version\":\"15.2(7)E8\",\"status\":\"affected\"},{\"version\":\"15.2(8)E4\",\"status\":\"affected\"},{\"version\":\"15.2(7)E9\",\"status\":\"affected\"},{\"version\":\"15.2(8)E5\",\"status\":\"affected\"},{\"version\":\"15.2(8)E6\",\"status\":\"affected\"},{\"version\":\"15.2(7)E10\",\"status\":\"affected\"},{\"version\":\"15.2(7)E11\",\"status\":\"affected\"},{\"version\":\"15.2(8)E7\",\"status\":\"affected\"},{\"version\":\"15.2(7)E12\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB2\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB3\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB1\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB2\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3a\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB4\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB4\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3h\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3b\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB5\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB6\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB5\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB6\",\"status\":\"affected\"},{\"version\":\"15.2(2)JAX\",\"status\":\"affected\"},{\"version\":\"15.3(3)M\",\"status\":\"affected\"},{\"version\":\"15.3(3)M1\",\"status\":\"affected\"},{\"version\":\"15.3(3)M2\",\"status\":\"affected\"},{\"version\":\"15.3(3)M3\",\"status\":\"affected\"},{\"version\":\"15.3(3)M5\",\"status\":\"affected\"},{\"version\":\"15.3(3)M4\",\"status\":\"affected\"},{\"version\":\"15.3(3)M6\",\"status\":\"affected\"},{\"version\":\"15.3(3)M7\",\"status\":\"affected\"},{\"version\":\"15.3(3)M8\",\"status\":\"affected\"},{\"version\":\"15.3(3)M9\",\"status\":\"affected\"},{\"version\":\"15.3(3)M10\",\"status\":\"affected\"},{\"version\":\"15.3(3)M8a\",\"status\":\"affected\"},{\"version\":\"15.2(4)JN\",\"status\":\"affected\"},{\"version\":\"15.2(1)EY\",\"status\":\"affected\"},{\"version\":\"15.0(2)EJ\",\"status\":\"affected\"},{\"version\":\"15.0(2)EJ1\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY0a\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY1a\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY1\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY2\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY3\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY7\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY8\",\"status\":\"affected\"},{\"version\":\"15.2(5)EX\",\"status\":\"affected\"},{\"version\":\"15.0(2)EK\",\"status\":\"affected\"},{\"version\":\"15.0(2)EK1\",\"status\":\"affected\"},{\"version\":\"15.4(1)CG\",\"status\":\"affected\"},{\"version\":\"15.4(1)CG1\",\"status\":\"affected\"},{\"version\":\"15.4(2)CG\",\"status\":\"affected\"},{\"version\":\"15.5(1)S\",\"status\":\"affected\"},{\"version\":\"15.5(2)S\",\"status\":\"affected\"},{\"version\":\"15.5(1)S1\",\"status\":\"affected\"},{\"version\":\"15.5(3)S\",\"status\":\"affected\"},{\"version\":\"15.5(1)S2\",\"status\":\"affected\"},{\"version\":\"15.5(1)S3\",\"status\":\"affected\"},{\"version\":\"15.5(2)S1\",\"status\":\"affected\"},{\"version\":\"15.5(2)S2\",\"status\":\"affected\"},{\"version\":\"15.5(3)S1\",\"status\":\"affected\"},{\"version\":\"15.5(3)S1a\",\"status\":\"affected\"},{\"version\":\"15.5(2)S3\",\"status\":\"affected\"},{\"version\":\"15.5(3)S2\",\"status\":\"affected\"},{\"version\":\"15.5(3)S0a\",\"status\":\"affected\"},{\"version\":\"15.5(3)S3\",\"status\":\"affected\"},{\"version\":\"15.5(1)S4\",\"status\":\"affected\"},{\"version\":\"15.5(2)S4\",\"status\":\"affected\"},{\"version\":\"15.5(3)S4\",\"status\":\"affected\"},{\"version\":\"15.5(3)S5\",\"status\":\"affected\"},{\"version\":\"15.5(3)S6\",\"status\":\"affected\"},{\"version\":\"15.5(3)S6a\",\"status\":\"affected\"},{\"version\":\"15.5(3)S7\",\"status\":\"affected\"},{\"version\":\"15.5(3)S6b\",\"status\":\"affected\"},{\"version\":\"15.5(3)S8\",\"status\":\"affected\"},{\"version\":\"15.5(3)S9\",\"status\":\"affected\"},{\"version\":\"15.5(3)S10\",\"status\":\"affected\"},{\"version\":\"15.5(3)S9a\",\"status\":\"affected\"},{\"version\":\"15.5(1)T\",\"status\":\"affected\"},{\"version\":\"15.5(1)T1\",\"status\":\"affected\"},{\"version\":\"15.5(2)T\",\"status\":\"affected\"},{\"version\":\"15.5(1)T2\",\"status\":\"affected\"},{\"version\":\"15.5(1)T3\",\"status\":\"affected\"},{\"version\":\"15.5(2)T1\",\"status\":\"affected\"},{\"version\":\"15.5(2)T2\",\"status\":\"affected\"},{\"version\":\"15.5(2)T3\",\"status\":\"affected\"},{\"version\":\"15.5(2)T4\",\"status\":\"affected\"},{\"version\":\"15.5(1)T4\",\"status\":\"affected\"},{\"version\":\"15.2(2)EA\",\"status\":\"affected\"},{\"version\":\"15.2(2)EA1\",\"status\":\"affected\"},{\"version\":\"15.2(2)EA2\",\"status\":\"affected\"},{\"version\":\"15.2(3)EA\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA1\",\"status\":\"affected\"},{\"version\":\"15.2(2)EA3\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA3\",\"status\":\"affected\"},{\"version\":\"15.2(5)EA\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA4\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA5\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA6\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA7\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA8\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA9\",\"status\":\"affected\"},{\"version\":\"15.2(4)EA9a\",\"status\":\"affected\"},{\"version\":\"15.3(3)JN3\",\"status\":\"affected\"},{\"version\":\"15.3(3)JN4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JN7\",\"status\":\"affected\"},{\"version\":\"15.3(3)JN8\",\"status\":\"affected\"},{\"version\":\"15.3(3)JN9\",\"status\":\"affected\"},{\"version\":\"15.5(3)M\",\"status\":\"affected\"},{\"version\":\"15.5(3)M1\",\"status\":\"affected\"},{\"version\":\"15.5(3)M0a\",\"status\":\"affected\"},{\"version\":\"15.5(3)M2\",\"status\":\"affected\"},{\"version\":\"15.5(3)M3\",\"status\":\"affected\"},{\"version\":\"15.5(3)M4\",\"status\":\"affected\"},{\"version\":\"15.5(3)M4a\",\"status\":\"affected\"},{\"version\":\"15.5(3)M5\",\"status\":\"affected\"},{\"version\":\"15.5(3)M6\",\"status\":\"affected\"},{\"version\":\"15.5(3)M7\",\"status\":\"affected\"},{\"version\":\"15.5(3)M6a\",\"status\":\"affected\"},{\"version\":\"15.5(3)M8\",\"status\":\"affected\"},{\"version\":\"15.5(3)M9\",\"status\":\"affected\"},{\"version\":\"15.5(3)M10\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA1m\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA5\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA6\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA7\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA8\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA10\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA11\",\"status\":\"affected\"},{\"version\":\"15.3(3)JA12\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAA\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAA11\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAA12\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAB\",\"status\":\"affected\"},{\"version\":\"15.3(3)JB\",\"status\":\"affected\"},{\"version\":\"15.5(3)SN\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD1\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD2\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD4\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD5\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD6\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD7\",\"status\":\"affected\"},{\"version\":\"15.0(2)SQD8\",\"status\":\"affected\"},{\"version\":\"15.6(1)S\",\"status\":\"affected\"},{\"version\":\"15.6(2)S\",\"status\":\"affected\"},{\"version\":\"15.6(2)S1\",\"status\":\"affected\"},{\"version\":\"15.6(1)S1\",\"status\":\"affected\"},{\"version\":\"15.6(1)S2\",\"status\":\"affected\"},{\"version\":\"15.6(2)S2\",\"status\":\"affected\"},{\"version\":\"15.6(1)S3\",\"status\":\"affected\"},{\"version\":\"15.6(2)S3\",\"status\":\"affected\"},{\"version\":\"15.6(1)S4\",\"status\":\"affected\"},{\"version\":\"15.6(2)S4\",\"status\":\"affected\"},{\"version\":\"15.6(1)T\",\"status\":\"affected\"},{\"version\":\"15.6(2)T\",\"status\":\"affected\"},{\"version\":\"15.6(1)T0a\",\"status\":\"affected\"},{\"version\":\"15.6(1)T1\",\"status\":\"affected\"},{\"version\":\"15.6(2)T1\",\"status\":\"affected\"},{\"version\":\"15.6(1)T2\",\"status\":\"affected\"},{\"version\":\"15.6(2)T2\",\"status\":\"affected\"},{\"version\":\"15.6(1)T3\",\"status\":\"affected\"},{\"version\":\"15.6(2)T3\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB3\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB6\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNB5\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAX\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAX1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JAX2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB5\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB6\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB8\",\"status\":\"affected\"},{\"version\":\"15.3(3)JBB6a\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC3\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC5\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC6\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC8\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC9\",\"status\":\"affected\"},{\"version\":\"15.3(3)JC14\",\"status\":\"affected\"},{\"version\":\"15.3(1)SY\",\"status\":\"affected\"},{\"version\":\"15.3(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.3(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNC\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNC1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNC4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNP\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNP1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JNP3\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP1\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP2\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP3\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP4\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP5\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP6\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP7\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP8\",\"status\":\"affected\"},{\"version\":\"15.6(2)SP9\",\"status\":\"affected\"},{\"version\":\"15.6(2)SN\",\"status\":\"affected\"},{\"version\":\"15.3(3)JPB\",\"status\":\"affected\"},{\"version\":\"15.3(3)JPB1\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD2\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD3\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD4\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD5\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD6\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD7\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD8\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD9\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD11\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD13\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD14\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD16\",\"status\":\"affected\"},{\"version\":\"15.3(3)JD17\",\"status\":\"affected\"},{\"version\":\"15.6(3)M\",\"status\":\"affected\"},{\"version\":\"15.6(3)M1\",\"status\":\"affected\"},{\"version\":\"15.6(3)M0a\",\"status\":\"affected\"},{\"version\":\"15.6(3)M1b\",\"status\":\"affected\"},{\"version\":\"15.6(3)M2\",\"status\":\"affected\"},{\"version\":\"15.6(3)M2a\",\"status\":\"affected\"},{\"version\":\"15.6(3)M3\",\"status\":\"affected\"},{\"version\":\"15.6(3)M3a\",\"status\":\"affected\"},{\"version\":\"15.6(3)M4\",\"status\":\"affected\"},{\"version\":\"15.6(3)M5\",\"status\":\"affected\"},{\"version\":\"15.6(3)M6\",\"status\":\"affected\"},{\"version\":\"15.6(3)M7\",\"status\":\"affected\"},{\"version\":\"15.6(3)M6a\",\"status\":\"affected\"},{\"version\":\"15.6(3)M6b\",\"status\":\"affected\"},{\"version\":\"15.6(3)M8\",\"status\":\"affected\"},{\"version\":\"", "truncated": true, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco IOS XE Software\",\"versions\":[{\"version\":\"3.5.0E\",\"status\":\"affected\"},{\"version\":\"3.5.1E\",\"status\":\"affected\"},{\"version\":\"3.5.2E\",\"status\":\"affected\"},{\"version\":\"3.5.3E\",\"status\":\"affected\"},{\"version\":\"3.6.0E\",\"status\":\"affected\"},{\"version\":\"3.6.1E\",\"status\":\"affected\"},{\"version\":\"3.6.2aE\",\"status\":\"affected\"},{\"version\":\"3.6.2E\",\"status\":\"affected\"},{\"version\":\"3.6.3E\",\"status\":\"affected\"},{\"version\":\"3.6.4E\",\"status\":\"affected\"},{\"version\":\"3.6.5E\",\"status\":\"affected\"},{\"version\":\"3.6.6E\",\"status\":\"affected\"},{\"version\":\"3.6.5aE\",\"status\":\"affected\"},{\"version\":\"3.6.7E\",\"status\":\"affected\"},{\"version\":\"3.6.8E\",\"status\":\"affected\"},{\"version\":\"3.6.7bE\",\"status\":\"affected\"},{\"version\":\"3.6.9E\",\"status\":\"affected\"},{\"version\":\"3.6.10E\",\"status\":\"affected\"},{\"version\":\"3.14.0S\",\"status\":\"affected\"},{\"version\":\"3.14.1S\",\"status\":\"affected\"},{\"version\":\"3.14.2S\",\"status\":\"affected\"},{\"version\":\"3.14.3S\",\"status\":\"affected\"},{\"version\":\"3.14.4S\",\"status\":\"affected\"},{\"version\":\"3.15.0S\",\"status\":\"affected\"},{\"version\":\"3.15.1S\",\"status\":\"affected\"},{\"version\":\"3.15.2S\",\"status\":\"affected\"},{\"version\":\"3.15.1cS\",\"status\":\"affected\"},{\"version\":\"3.15.3S\",\"status\":\"affected\"},{\"version\":\"3.15.4S\",\"status\":\"affected\"},{\"version\":\"3.7.0E\",\"status\":\"affected\"},{\"version\":\"3.7.1E\",\"status\":\"affected\"},{\"version\":\"3.7.2E\",\"status\":\"affected\"},{\"version\":\"3.7.3E\",\"status\":\"affected\"},{\"version\":\"3.7.4E\",\"status\":\"affected\"},{\"version\":\"3.7.5E\",\"status\":\"affected\"},{\"version\":\"3.5.0SQ\",\"status\":\"affected\"},{\"version\":\"3.5.1SQ\",\"status\":\"affected\"},{\"version\":\"3.5.2SQ\",\"status\":\"affected\"},{\"version\":\"3.5.3SQ\",\"status\":\"affected\"},{\"version\":\"3.5.4SQ\",\"status\":\"affected\"},{\"version\":\"3.5.5SQ\",\"status\":\"affected\"},{\"version\":\"3.5.6SQ\",\"status\":\"affected\"},{\"version\":\"3.5.7SQ\",\"status\":\"affected\"},{\"version\":\"3.5.8SQ\",\"status\":\"affected\"},{\"version\":\"3.16.0S\",\"status\":\"affected\"},{\"version\":\"3.16.1S\",\"status\":\"affected\"},{\"version\":\"3.16.1aS\",\"status\":\"affected\"},{\"version\":\"3.16.2S\",\"status\":\"affected\"},{\"version\":\"3.16.2aS\",\"status\":\"affected\"},{\"version\":\"3.16.0cS\",\"status\":\"affected\"},{\"version\":\"3.16.3S\",\"status\":\"affected\"},{\"version\":\"3.16.2bS\",\"status\":\"affected\"},{\"version\":\"3.16.3aS\",\"status\":\"affected\"},{\"version\":\"3.16.4S\",\"status\":\"affected\"},{\"version\":\"3.16.4aS\",\"status\":\"affected\"},{\"version\":\"3.16.4bS\",\"status\":\"affected\"},{\"version\":\"3.16.5S\",\"status\":\"affected\"},{\"version\":\"3.16.4dS\",\"status\":\"affected\"},{\"version\":\"3.16.6S\",\"status\":\"affected\"},{\"version\":\"3.16.7S\",\"status\":\"affected\"},{\"version\":\"3.16.6bS\",\"status\":\"affected\"},{\"version\":\"3.16.7aS\",\"status\":\"affected\"},{\"version\":\"3.16.7bS\",\"status\":\"affected\"},{\"version\":\"3.16.8S\",\"status\":\"affected\"},{\"version\":\"3.16.9S\",\"status\":\"affected\"},{\"version\":\"3.16.10S\",\"status\":\"affected\"},{\"version\":\"3.17.0S\",\"status\":\"affected\"},{\"version\":\"3.17.1S\",\"status\":\"affected\"},{\"version\":\"3.17.2S\",\"status\":\"affected\"},{\"version\":\"3.17.1aS\",\"status\":\"affected\"},{\"version\":\"3.17.3S\",\"status\":\"affected\"},{\"version\":\"3.17.4S\",\"status\":\"affected\"},{\"version\":\"3.8.0E\",\"status\":\"affected\"},{\"version\":\"3.8.1E\",\"status\":\"affected\"},{\"version\":\"3.8.2E\",\"status\":\"affected\"},{\"version\":\"3.8.3E\",\"status\":\"affected\"},{\"version\":\"3.8.4E\",\"status\":\"affected\"},{\"version\":\"3.8.5E\",\"status\":\"affected\"},{\"version\":\"3.8.5aE\",\"status\":\"affected\"},{\"version\":\"3.8.6E\",\"status\":\"affected\"},{\"version\":\"3.8.7E\",\"status\":\"affected\"},{\"version\":\"3.8.8E\",\"status\":\"affected\"},{\"version\":\"3.8.9E\",\"status\":\"affected\"},{\"version\":\"3.8.10E\",\"status\":\"affected\"},{\"version\":\"3.18.0aS\",\"status\":\"affected\"},{\"version\":\"3.18.0S\",\"status\":\"affected\"},{\"version\":\"3.18.1S\",\"status\":\"affected\"},{\"version\":\"3.18.2S\",\"status\":\"affected\"},{\"version\":\"3.18.3S\",\"status\":\"affected\"},{\"version\":\"3.18.4S\",\"status\":\"affected\"},{\"version\":\"3.18.0SP\",\"status\":\"affected\"},{\"version\":\"3.18.1SP\",\"status\":\"affected\"},{\"version\":\"3.18.1aSP\",\"status\":\"affected\"},{\"version\":\"3.18.1bSP\",\"status\":\"affected\"},{\"version\":\"3.18.1cSP\",\"status\":\"affected\"},{\"version\":\"3.18.2SP\",\"status\":\"affected\"},{\"version\":\"3.18.2aSP\",\"status\":\"affected\"},{\"version\":\"3.18.3SP\",\"status\":\"affected\"},{\"version\":\"3.18.4SP\",\"status\":\"affected\"},{\"version\":\"3.18.3aSP\",\"status\":\"affected\"},{\"version\":\"3.18.3bSP\",\"status\":\"affected\"},{\"version\":\"3.18.5SP\",\"status\":\"affected\"},{\"version\":\"3.18.6SP\",\"status\":\"affected\"},{\"version\":\"3.18.7SP\",\"status\":\"affected\"},{\"version\":\"3.18.8aSP\",\"status\":\"affected\"},{\"version\":\"3.18.9SP\",\"status\":\"affected\"},{\"version\":\"3.9.0E\",\"status\":\"affected\"},{\"version\":\"3.9.1E\",\"status\":\"affected\"},{\"version\":\"3.9.2E\",\"status\":\"affected\"},{\"version\":\"16.6.1\",\"status\":\"affected\"},{\"version\":\"16.6.2\",\"status\":\"affected\"},{\"version\":\"16.6.3\",\"status\":\"affected\"},{\"version\":\"16.6.4\",\"status\":\"affected\"},{\"version\":\"16.6.5\",\"status\":\"affected\"},{\"version\":\"16.6.4a\",\"status\":\"affected\"},{\"version\":\"16.6.5a\",\"status\":\"affected\"},{\"version\":\"16.6.6\",\"status\":\"affected\"},{\"version\":\"16.6.7\",\"status\":\"affected\"},{\"version\":\"16.6.8\",\"status\":\"affected\"},{\"version\":\"16.6.9\",\"status\":\"affected\"},{\"version\":\"16.6.10\",\"status\":\"affected\"},{\"version\":\"16.7.1\",\"status\":\"affected\"},{\"version\":\"16.7.1a\",\"status\":\"affected\"},{\"version\":\"16.7.1b\",\"status\":\"affected\"},{\"version\":\"16.7.2\",\"status\":\"affected\"},{\"version\":\"16.7.3\",\"status\":\"affected\"},{\"version\":\"16.7.4\",\"status\":\"affected\"},{\"version\":\"16.8.1\",\"status\":\"affected\"},{\"version\":\"16.8.1a\",\"status\":\"affected\"},{\"version\":\"16.8.1b\",\"status\":\"affected\"},{\"version\":\"16.8.1s\",\"status\":\"affected\"},{\"version\":\"16.8.1c\",\"status\":\"affected\"},{\"version\":\"16.8.1d\",\"status\":\"affected\"},{\"version\":\"16.8.2\",\"status\":\"affected\"},{\"version\":\"16.8.1e\",\"status\":\"affected\"},{\"version\":\"16.8.3\",\"status\":\"affected\"},{\"version\":\"16.9.1\",\"status\":\"affected\"},{\"version\":\"16.9.2\",\"status\":\"affected\"},{\"version\":\"16.9.1a\",\"status\":\"affected\"},{\"version\":\"16.9.1b\",\"status\":\"affected\"},{\"version\":\"16.9.1s\",\"status\":\"affected\"},{\"version\":\"16.9.3\",\"status\":\"affected\"},{\"version\":\"16.9.4\",\"status\":\"affected\"},{\"version\":\"16.9.3a\",\"status\":\"affected\"},{\"version\":\"16.9.5\",\"status\":\"affected\"},{\"version\":\"16.9.5f\",\"status\":\"affected\"},{\"version\":\"16.9.6\",\"status\":\"affected\"},{\"version\":\"16.9.7\",\"status\":\"affected\"},{\"version\":\"16.9.8\",\"status\":\"affected\"},{\"version\":\"16.10.1\",\"status\":\"affected\"},{\"version\":\"16.10.1a\",\"status\":\"affected\"},{\"version\":\"16.10.1b\",\"status\":\"affected\"},{\"version\":\"16.10.1s\",\"status\":\"affected\"},{\"version\":\"16.10.1c\",\"status\":\"affected\"},{\"version\":\"16.10.1e\",\"status\":\"affected\"},{\"version\":\"16.10.1d\",\"status\":\"affected\"},{\"version\":\"16.10.2\",\"status\":\"affected\"},{\"version\":\"16.10.1f\",\"status\":\"affected\"},{\"version\":\"16.10.1g\",\"status\":\"affected\"},{\"version\":\"16.10.3\",\"status\":\"affected\"},{\"version\":\"3.10.0E\",\"status\":\"affected\"},{\"version\":\"3.10.1E\",\"status\":\"affected\"},{\"version\":\"3.10.0cE\",\"status\":\"affected\"},{\"version\":\"3.10.2E\",\"status\":\"affected\"},{\"version\":\"3.10.3E\",\"status\":\"affected\"},{\"version\":\"16.11.1\",\"status\":\"affected\"},{\"version\":\"16.11.1a\",\"status\":\"affected\"},{\"version\":\"16.11.1b\",\"status\":\"affected\"},{\"version\":\"16.11.2\",\"status\":\"affected\"},{\"version\":\"16.11.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1\",\"status\":\"affected\"},{\"version\":\"16.12.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1a\",\"status\":\"affected\"},{\"version\":\"16.12.1c\",\"status\":\"affected\"},{\"version\":\"16.12.1w\",\"status\":\"affected\"},{\"version\":\"16.12.2\",\"status\":\"affected\"},{\"version\":\"16.12.1y\",\"status\":\"affected\"},{\"version\":\"16.12.2a\",\"status\":\"affected\"},{\"version\":\"16.12.3\",\"status\":\"affected\"},{\"version\":\"16.12.8\",\"status\":\"affected\"},{\"version\":\"16.12.2s\",\"status\":\"affected\"},{\"version\":\"16.12.1x\",\"status\":\"affected\"},{\"version\":\"16.12.1t\",\"status\":\"affected\"},{\"version\":\"16.12.4\",\"status\":\"affected\"},{\"version\":\"16.12.3s\",\"status\":\"affected\"},{\"version\":\"16.12.3a\",\"status\":\"affected\"},{\"version\":\"16.12.4a\",\"status\":\"affected\"},{\"version\":\"16.12.5\",\"status\":\"affected\"},{\"version\":\"16.12.6\",\"status\":\"affected\"},{\"version\":\"16.12.1z1\",\"status\":\"affected\"},{\"version\":\"16.12.5a\",\"status\":\"affected\"},{\"version\":\"16.12.5b\",\"status\":\"affected\"},{\"version\":\"16.12.1z2\",\"status\":\"affected\"},{\"version\":\"16.12.6a\",\"status\":\"affected\"},{\"version\":\"16.12.7\",\"status\":\"affected\"},{\"version\":\"16.12.9\",\"status\":\"affected\"},{\"version\":\"16.12.10\",\"status\":\"affected\"},{\"version\":\"16.12.10a\",\"status\":\"affected\"},{\"version\":\"16.12.11\",\"status\":\"affected\"},{\"version\":\"16.12.12\",\"status\":\"affected\"},{\"version\":\"16.12.13\",\"status\":\"affected\"},{\"version\":\"3.11.0E\",\"status\":\"affected\"},{\"version\":\"3.11.1E\",\"status\":\"affected\"},{\"version\":\"3.11.2E\",\"status\":\"affected\"},{\"version\":\"3.11.3E\",\"status\":\"affected\"},{\"version\":\"3.11.1aE\",\"status\":\"affected\"},{\"version\":\"3.11.4E\",\"status\":\"affected\"},{\"version\":\"3.11.3aE\",\"status\":\"affected\"},{\"version\":\"3.11.5E\",\"status\":\"affected\"},{\"version\":\"3.11.6E\",\"status\":\"affected\"},{\"version\":\"3.11.7E\",\"status\":\"affected\"},{\"version\":\"3.11.8E\",\"status\":\"affected\"},{\"version\":\"3.11.9E\",\"status\":\"affected\"},{\"version\":\"3.11.10E\",\"status\":\"affected\"},{\"version\":\"3.11.11E\",\"status\":\"affected\"},{\"version\":\"3.11.12E\",\"status\":\"affected\"},{\"version\":\"17.1.1\",\"status\":\"affected\"},{\"version\":\"17.1.1a\",\"status\":\"affected\"},{\"version\":\"17.1.1s\",\"status\":\"affected\"},{\"version\":\"17.1.1t\",\"status\":\"affected\"},{\"version\":\"17.1.3\",\"status\":\"affected\"},{\"version\":\"17.2.1\",\"status\":\"affected\"},{\"version\":\"17.2.1r\",\"status\":\"affected\"},{\"version\":\"17.2.1a\",\"status\":\"affected\"},{\"version\":\"17.2.1v\",\"status\":\"affected\"},{\"version\":\"17.2.2\",\"status\":\"affected\"},{\"version\":\"17.2.3\",\"status\":\"affected\"},{\"version\":\"17.3.1\",\"status\":\"affected\"},{\"version\":\"17.3.2\",\"status\":\"affected\"},{\"version\":\"17.3.3\",\"status\":\"affected\"},{\"version\":\"17.3.1a\",\"status\":\"affected\"},{\"version\":\"17.3.1w\",\"status\":\"affected\"},{\"version\":\"17.3.2a\",\"status\":\"affected\"},{\"version\":\"17.3.1x\",\"status\":\"affected\"},{\"version\":\"17.3.1z\",\"status\":\"affected\"},{\"version\":\"17.3.4\",\"status\":\"affected\"},{\"version\":\"17.3.5\",\"status\":\"affected\"},{\"version\":\"17.3.4a\",\"status\":\"affected\"},{\"version\":\"17.3.6\",\"status\":\"affected\"},{\"version\":\"17.3.4b\",\"status\":\"affected\"},{\"version\":\"17.3.4c\",\"status\":\"affected\"},{\"version\":\"17.3.5a\",\"status\":\"affected\"},{\"version\":\"17.3.5b\",\"status\":\"affected\"},{\"version\":\"17.3.7\",\"status\":\"affected\"},{\"version\":\"17.3.8\",\"status\":\"affected\"},{\"version\":\"17.3.8a\",\"status\":\"affected\"},{\"version\":\"17.4.1\",\"status\":\"affected\"},{\"version\":\"17.4.2\",\"status\":\"affected\"},{\"version\":\"17.4.1a\",\"status\":\"affected\"},{\"version\":\"17.4.1b\",\"status\":\"affected\"},{\"version\":\"17.4.2a\",\"status\":\"affected\"},{\"version\":\"17.5.1\",\"status\":\"affected\"},{\"version\":\"17.5.1a\",\"status\":\"affected\"},{\"version\":\"17.6.1\",\"status\":\"affected\"},{\"version\":\"17.6.2\",\"status\":\"affected\"},{\"version\":\"17.6.1w\",\"status\":\"affected\"},{\"version\":\"17.6.1a\",\"status\":\"affected\"},{\"version\":\"17.6.1x\",\"status\":\"affected\"},{\"version\":\"17.6.3\",\"status\":\"affected\"},{\"version\":\"17.6.1y\",\"status\":\"affected\"},{\"version\":\"17.6.1z\",\"status\":\"affected\"},{\"version\":\"17.6.3a\",\"status\":\"affected\"},{\"version\":\"17.6.4\",\"status\":\"affected\"},{\"version\":\"17.6.1z1\",\"status\":\"affected\"},{\"version\":\"17.6.5\",\"status\":\"affected\"},{\"version\":\"17.6.6\",\"status\":\"affected\"},{\"version\":\"17.6.6a\",\"status\":\"affected\"},{\"version\":\"17.6.5a\",\"status\":\"affected\"},{\"version\":\"17.6.7\",\"status\":\"affected\"},{\"version\":\"17.6.8\",\"status\":\"affected\"},{\"version\":\"17.6.8a\",\"status\":\"affected\"},{\"version\":\"17.7.1\",\"status\":\"affected\"},{\"version\":\"17.7.1a\",\"status\":\"affected\"},{\"version\":\"17.7.1b\",\"status\":\"affected\"},{\"version\":\"17.7.2\",\"status\":\"affected\"},{\"version\":\"17.10.1\",\"status\":\"affected\"},{\"version\":\"17.10.1a\",\"status\":\"affected\"},{\"version\":\"17.10.1b\",\"status\":\"affected\"},{\"version\":\"17.8.1\",\"status\":\"affected\"},{\"version\":\"17.8.1a\",\"status\":\"affected\"},{\"version\":\"17.9.1\",\"status\":\"affected\"},{\"version\":\"17.9.1w\",\"status\":\"affected\"},{\"version\":\"17.9.2\",\"status\":\"affected\"},{\"version\":\"17.9.1a\",\"status\":\"affected\"},{\"version\":\"17.9.1x\",\"status\":\"affected\"},{\"version\":\"17.9.1y\",\"status\":\"affected\"},{\"version\":\"17.9.3\",\"status\":\"affected\"},{\"version\":\"17.9.2a\",\"status\":\"affected\"},{\"version\":\"17.9.1x1\",\"status\":\"affected\"},{\"version\":\"17.9.3a\",\"status\":\"affected\"},{\"version\":\"17.9.4\",\"status\":\"affected\"},{\"version\":\"17.9.1y1\",\"status\":\"affected\"},{\"version\":\"17.9.5\",\"status\":\"affected\"},{\"version\":\"17.9.4a\",\"status\":\"affected\"},{\"version\":\"17.9.5a\",\"status\":\"affected\"},{\"version\":\"17.9.5b\",\"status\":\"affected\"},{\"version\":\"17.9.6\",\"status\":\"affected\"},{\"version\":\"17.9.6a\",\"status\":\"affected\"},{\"version\":\"17.9.7\",\"status\":\"affected\"},{\"version\":\"17.9.5e\",\"status\":\"affected\"},{\"version\":\"17.9.5f\",\"status\":\"affected\"},{\"version\":\"17.9.7a\",\"status\":\"affected\"},{\"version\":\"17.9.7b\",\"status\":\"affected\"},{\"version\":\"17.11.1\",\"status\":\"affected\"},{\"version\":\"17.11.1a\",\"status\":\"affected\"},{\"version\":\"17.12.1\",\"status\":\"affected\"},{\"version\":\"17.12.1w\",\"status\":\"affected\"},{\"version\":\"17.12.1a\",\"status\":\"affected\"},{\"version\":\"17.12.1x\",\"status\":\"affected\"},{\"version\":\"17.12.2\",\"status\":\"affected\"},{\"version\":\"17.12.3\",\"status\":\"affected\"},{\"version\":\"17.12.2a\",\"status\":\"affected\"},{\"version\":\"17.12.1y\",\"status\":\"affected\"},{\"version\":\"17.12.1z\",\"status\":\"affected\"},{\"version\":\"17.12.4\",\"status\":\"affected\"},{\"version\":\"17.12.3a\",\"status\":\"affected\"},{\"version\":\"17.12.1z1\",\"status\":\"affected\"},{\"version\":\"17.12.1z2\",\"status\":\"affected\"},{\"version\":\"17.12.4a\",\"status\":\"affected\"},{\"version\":\"17.12.5\",\"status\":\"affected\"},{\"version\":\"17.12.4b\",\"status\":\"affected\"},{\"version\":\"17.12.1z3\",\"status\":\"affected\"},{\"version\":\"17.12.5a\",\"status\":\"affected\"},{\"version\":\"17.12.1z4\",\"status\":\"affected\"},{\"version\":\"17.12.5b\",\"status\":\"affected\"},{\"version\":\"17.12.5c\",\"status\":\"affected\"},{\"version\":\"17.13.1\",\"status\":\"affected\"},{\"version\":\"17.13.1a\",\"status\":\"affected\"},{\"version\":\"17.14.1\",\"status\":\"affected\"},{\"version\":\"17.14.1a\",\"status\":\"affected\"},{\"version\":\"17.15.1\",\"status\":\"affected\"},{\"version\":\"17.15.1w\",\"status\":\"affected\"},{\"version\":\"17.15.1a\",\"status\":\"affected\"},{\"version\":\"17.15.2\",\"status\":\"affected\"},{\"version\":\"17.15.1b\",\"status\":\"affected\"},{\"version\":\"17.15.1x\",\"status\":\"affected\"},{\"version\":\"17.15.1z\",\"status\":\"affected\"},{\"version\":\"17.15.3\",\"status\":\"affected\"},{\"version\":\"17.15.2c\",\"status\":\"affected\"},{\"version\":\"17.15.2a\",\"status\":\"affected\"},{\"version\":\"17.15.1y\",\"status\":\"affected\"},{\"version\":\"17.15.2b\",\"status\":\"affected\"},{\"version\":\"17.15.3a\",\"status\":\"affected\"},{\"version\":\"17.15.4\",\"status\":\"affected\"},{\"version\":\"17.15.3b\",\"status\":\"affected\"},{\"version\":\"17.16.1\",\"status\":\"affected\"},{\"version\":\"17.16.1a\",\"status\":\"affected\"},{\"version\":\"17.17.1\",\"status\":\"affected\"},{\"version\":\"17.18.1\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco IOS XE Catalyst SD-WAN\",\"versions\":[{\"version\":\"16.9.1\",\"status\":\"affected\"},{\"version\":\"16.9.2\",\"status\":\"affected\"},{\"version\":\"16.9.3\",\"status\":\"affected\"},{\"version\":\"16.9.4\",\"status\":\"affected\"},{\"version\":\"16.10.1\",\"status\":\"affected\"},{\"version\":\"16.10.2\",\"status\":\"affected\"},{\"version\":\"16.10.3\",\"status\":\"affected\"},{\"version\":\"16.10.3a\",\"status\":\"affected\"},{\"version\":\"16.10.3b\",\"status\":\"affected\"},{\"version\":\"16.10.4\",\"status\":\"affected\"},{\"version\":\"16.10.5\",\"status\":\"affected\"},{\"version\":\"16.10.6\",\"status\":\"affected\"},{\"version\":\"16.11.1a\",\"status\":\"affected\"},{\"version\":\"16.12.1b\",\"status\":\"affected\"},{\"version\":\"16.12.1d\",\"status\":\"affected\"},{\"version\":\"16.12.1e\",\"status\":\"affected\"},{\"version\":\"16.12.2r\",\"status\":\"affected\"},{\"version\":\"16.12.3\",\"status\":\"affected\"},{\"version\":\"16.12.4\",\"status\":\"affected\"},{\"version\":\"16.12.4a\",\"status\":\"affected\"},{\"version\":\"16.12.5\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:\r\n\r \r An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. \r An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. \r \r An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. \r\n\r This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.\r\n\r Note: This vulnerability affects all versions of SNMP.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco Product Security Incident Response Team (PSIRT) became aware of successful exploitation of this vulnerability in the wild after local Administrator credentials were compromised. Cisco strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Stack-based Buffer Overflow\",\"type\":\"cwe\",\"cweId\":\"CWE-121\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-20352:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "sourcePath": "retained:/originalText", "text": "Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-20352:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "bounded", "truncatedFields": [ "/containers/cna/affected/0/versions", "/containers/cna/affected/0", "/containers/cna/affected/1/versions" ], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:48:03.098Z", "fetchedAt": "2026-10-24T04:41:40.388Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WANにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:40.388Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1d80ad40d1308e5f5924bd7995c749397415baaaca259d0a88d0ed4a7064d5e8", "sourceModifiedAt": "2026-02-26T17:48:03.098Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco IOS ソフトウェアおよび Cisco IOS XE ソフトウェアの SNMP サブシステムにスタックオーバーフローがあり、認証済みのリモート攻撃者が SNMPv2c 以前の読み取り専用コミュニティ文字列または有効な SNMPv3 ユーザー認証情報を持っている場合、デバイスを再起動させてサービス停止（DoS）させることができ、さらに管理者権限（特権 15）または root 権限を持つ認証情報と組み合わせると、root ユーザーとしてコードを実行し、デバイスを完全に制御できるようになる。攻撃は IPv4 または IPv6 上で細工した SNMP パケットを送信することで行われ、影響はすべての SNMP バージョンに及ぶ。", "risk": "低権限の攻撃者はデバイスを再起動させてサービス停止（DoS）させる可能性があり、高権限の攻撃者は任意のコードを root 権限で実行し、デバイスを完全に制御できる可能性がある。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証済みのリモート攻撃者であり、SNMPv2c 以前の読み取り専用コミュニティ文字列、または有効な SNMPv3 ユーザー認証情報を保持している必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E1" ] }, { "text": "高権限でコード実行を行うには、上記の認証情報に加えて、対象デバイス上で管理者権限（特権 15）または root 権限を持つ認証情報が必要である。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象となるデバイスは Cisco IOS Software または Cisco IOS XE Software を実行している必要がある。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / IOS。影響ありとして記載：12.2(55)SE。影響ありとして記載：12.2(55)SE3。影響ありとして記載：12.2(55)SE2。影響ありとして記載：12.2(58)SE。影響ありとして記載：12.2(55)SE1。影響ありとして記載：12.2(58)SE1。影響ありとして記載：12.2(55)SE4。影響ありとして記載：12.2(58)SE2。影響ありとして記載：12.2(55)SE5。影響ありとして記載：12.2(55)SE6。影響ありとして記載：12.2(55)SE7。影響ありとして記載：12.2(55)SE8。影響ありとして記載：12.2(55)SE9。影響ありとして記載：12.2(55)SE10。影響ありとして記載：12.2(55)SE11。影響ありとして記載：12.2(55)SE12。影響ありとして記載：12.2(55)SE13。影響ありとして記載：12.2(58)EZ。影響ありとして記載：12.2(53)EZ。影響ありとして記載：12.2(55)EZ。影響ありとして記載：12.2(60)EZ。影響ありとして記載：12.2(60)EZ1。影響ありとして記載：12.2(60)EZ2。影響ありとして記載：12.2(60)EZ3。影響ありとして記載：12.2(60)EZ4。影響ありとして記載：12.2(60)EZ5。影響ありとして記載：12.2(60)EZ6。影響ありとして記載：12.2(60)EZ7。影響ありとして記載：12.2(60)EZ8。影響ありとして記載：12.2(60)EZ9。影響ありとして記載：12.2(60)EZ10。影響ありとして記載：12.2(60)EZ11。影響ありとして記載：12.2(60)EZ12。影響ありとして記載：12.2(60)EZ13。影響ありとして記載：12.2(60)EZ14。影響ありとして記載：12.2(60)EZ15。影響ありとして記載：12.2(33)SXI2。影響ありとして記載：12.2(33)SXI3。影響ありとして記載：12.2(33)SXI5。影響ありとして記載：12.2(33)SXI4a。影響ありとして記載：12.2(33)SXI4。影響ありとして記載：12.2(33)SXI2a。影響ありとして記載：12.2(33)SXI。影響ありとして記載：12.2(33)SXI6。影響ありとして記載：12.2(33)SXI7。影響ありとして記載：12.2(33)SXI1。影響ありとして記載：12.2(33)SXI8。影響ありとして記載：12.2(33)SXI9。影響ありとして記載：12.2(33)SXI8a。影響ありとして記載：12.2(33)SXI10。影響ありとして記載：12.2(33)SXI11。影響ありとして記載：12.2(33)SXI12。影響ありとして記載：12.2(33)SXI13。影響ありとして記載：12.2(33)SXI14。影響ありとして記載：12.2(50)SQ2。影響ありとして記載：12.2(50)SQ1。影響ありとして記載：12.2(50)SQ。影響ありとして記載：12.2(50)SQ3。影響ありとして記載：12.2(50)SQ4。影響ありとして記載：12.2(50)SQ5。影響ありとして記載：12.2(50)SQ6。影響ありとして記載：12.2(50)SQ7。影響ありとして記載：15.3(1)T。影響ありとして記載：15.3(2)T。影響ありとして記載：15.3(1)T1。影響ありとして記載：15.3(1)T2。影響ありとして記載：15.3(1)T3。影響ありとして記載：15.3(1)T4。影響ありとして記載：15.3(2)T1。影響ありとして記載：15.3(2)T2。影響ありとして記載：15.3(2)T3。影響ありとして記載：15.3(2)T4。影響ありとして記載：15.0(1)EY。影響ありとして記載：15.0(1)EY1。影響ありとして記載：15.0(1)EY2。影響ありとして記載：15.0(2)EY。影響ありとして記載：15.0(2)EY1。影響ありとして記載：15.0(2)EY2。影響ありとして記載：15.0(2)EY3。影響ありとして記載：15.0(1)SE。影響ありとして記載：15.0(2)SE。影響ありとして記載：15.0(1)SE1。影響ありとして記載：15.0(1)SE2。影響ありとして記載：15.0(1)SE3。影響ありとして記載：15.0(2)SE1。影響ありとして記載：15.0(2)SE2。影響ありとして記載：15.0(2)SE3。影響ありとして記載：15.0(2)SE4。影響ありとして記載：15.0(2)SE5。影響ありとして記載：15.0(2)SE6。影響ありとして記載：15.0(2)SE7。影響ありとして記載：15.0(2)SE8。影響ありとして記載：15.0(2)SE9。影響ありとして記載：15.0(2)SE10。影響ありとして記載：15.0(2)SE11。影響ありとして記載：15.0(2)SE10a。影響ありとして記載：15.0(2)SE12。影響ありとして記載：15.0(2)SE13。影響ありとして記載：15.0(1)SY。影響ありとして記載：15.0(1)SY1。影響ありとして記載：15.0(1)SY2。影響ありとして記載：15.0(1)SY3。影響ありとして記載：15.0(1)SY4。影響ありとして記載：15.0(1)SY5。影響ありとして記載：15.0(1)SY6。影響ありとして記載：15.0(1)SY7。影響ありとして記載：15.0(1)SY8。影響ありとして記載：15.0(1)SY7a。影響ありとして記載：15.0(1)SY9。影響ありとして記載：15.0(1)SY10。影響ありとして記載：12.2(33)SXJ。影響ありとして記載：12.2(33)SXJ1。影響ありとして記載：12.2(33)SXJ2。影響ありとして記載：12.2(33)SXJ3。影響ありとして記載：12.2(33)SXJ4。影響ありとして記載：12.2(33)SXJ5。影響ありとして記載：12.2(33)SXJ6。影響ありとして記載：12.2(33)SXJ7。影響ありとして記載：12.2(33)SXJ8。影響ありとして記載：12.2(33)SXJ9。影響ありとして記載：12.2(33)SXJ10。影響ありとして記載：15.1(1)SG。影響ありとして記載：15.1(2)SG。影響ありとして記載：15.1(1)SG1。影響ありとして記載：15.1(1)SG2。影響ありとして記載：15.1(2)SG1。影響ありとして記載：15.1(2)SG2。影響ありとして記載：15.1(2)SG3。影響ありとして記載：15.1(2)SG4。影響ありとして記載：15.1(2)SG5。影響ありとして記載：15.1(2)SG6。影響ありとして記載：15.1(2)SG7。影響ありとして記載：15.1(2)SG8。影響ありとして記載：15.2(4)M。影響ありとして記載：15.2(4)M1。影響ありとして記載：15.2(4)M2。影響ありとして記載：15.2(4)M4。影響ありとして記載：15.2(4)M3。影響ありとして記載：15.2(4)M5。影響ありとして記載：15.2(4)M8。影響ありとして記載：15.2(4)M10。影響ありとして記載：15.2(4)M7。影響ありとして記載：15.2(4)M6。影響ありとして記載：15.2(4)M9。影響ありとして記載：15.2(4)M6a。影響ありとして記載：15.2(4)M11。影響ありとして記載：15.0(2)SG。影響ありとして記載：15.0(2)SG1。影響ありとして記載：15.0(2)SG2。影響ありとして記載：15.0(2)SG3。影響ありとして記載：15.0(2)SG4。影響ありとして記載：15.0(2)SG5。影響ありとして記載：15.0(2)SG6。影響ありとして記載：15.0(2)SG7。影響ありとして記載：15.0(2)SG8。影響ありとして記載：15.0(2)SG9。影響ありとして記載：15.0(2)SG10。影響ありとして記載：15.0(2)SG11。影響ありとして記載：15.2(2)GC。影響ありとして記載：15.2(3)GC。影響ありとして記載：15.2(3)GC1。影響ありとして記載：15.2(4)GC。影響ありとして記載：15.2(4)GC1。影響ありとして記載：15.2(4)GC2。影響ありとして記載：15.2(4)GC3。影響ありとして記載：15.1(1)SY。影響ありとして記載：15.1(1)SY1。影響ありとして記載：15.1(2)SY。影響ありとして記載：15.1(2)SY1。影響ありとして記載：15.1(2)SY2。影響ありとして記載：15.1(1)SY2。影響ありとして記載：15.1(1)SY3。影響ありとして記載：15.1(2)SY3。影響ありとして記載：15.1(1)SY4。影響ありとして記載：15.1(2)SY4。影響ありとして記載：15.1(1)SY5。影響ありとして記載：15.1(2)SY5。影響ありとして記載：15.1(2)SY4a。影響ありとして記載：15.1(1)SY6。影響ありとして記載：15.1(2)SY6。影響ありとして記載：15.1(2)SY7。影響ありとして記載：15.1(2)SY8。影響ありとして記載：15.1(2)SY9。影響ありとして記載：15.1(2)SY10。影響ありとして記載：15.1(2)SY11。影響ありとして記載：15.1(2)SY12。影響ありとして記載：15.1(2)SY13。影響ありとして記載：15.1(2)SY14。影響ありとして記載：15.1(2)SY15。影響ありとして記載：15.1(2)SY16。影響ありとして記載：15.4(1)T。影響ありとして記載：15.4(2)T。影響ありとして記載：15.4(1)T2。影響ありとして記載：15.4(1)T1。影響ありとして記載：15.4(1)T3。影響ありとして記載：15.4(2)T1。影響ありとして記載：15.4(2)T3。影響ありとして記載：15.4(2)T2。影響ありとして記載：15.4(1)T4。影響ありとして記載：15.4(2)T4。影響ありとして記載：15.0(2)EA。影響ありとして記載：15.0(2)EA1。影響ありとして記載：15.2(1)E。影響ありとして記載：15.2(2)E。影響ありとして記載：15.2(1)E1。影響ありとして記載：15.2(3)E。影響ありとして記載：15.2(1)E2。影響ありとして記載：15.2(1)E3。影響ありとして記載：15.2(2)E1。影響ありとして記載：15.2(4)E。影響ありとして記載：15.2(3)E1。影響ありとして記載：15.2(2)E2。影響ありとして記載：15.2(2a)E1。影響ありとして記載：15.2(2)E3。影響ありとして記載：15.2(2a)E2。影響ありとして記載：15.2(3)E2。影響ありとして記載：15.2(3a)E。影響ありとして記載：15.2(3)E3。影響ありとして記載：15.2(4)E1。影響ありとして記載：15.2(2)E4。影響ありとして記載：15.2(2)E5。影響ありとして記載：15.2(4)E2。影響ありとして記載：15.2(3)E4。影響ありとして記載：15.2(5)E。影響ありとして記載：15.2(4)E3。影響ありとして記載：15.2(2)E6。影響ありとして記載：15.2(5a)E。影響ありとして記載：15.2(5)E1。影響ありとして記載：15.2(5b)E。影響ありとして記載：15.2(2)E5a。影響ありとして記載：15.2(5c)E。影響ありとして記載：15.2(2)E5b。影響ありとして記載：15.2(5a)E1。影響ありとして記載：15.2(4)E4。影響ありとして記載：15.2(2)E7。影響ありとして記載：15.2(5)E2。影響ありとして記載：15.2(6)E。影響ありとして記載：15.2(4)E5。影響ありとして記載：15.2(5)E2c。影響ありとして記載：15.2(2)E8。影響ありとして記載：15.2(6)E0a。影響ありとして記載：15.2(6)E1。影響ありとして記載：15.2(6)E0c。影響ありとして記載：15.2(4)E6。影響ありとして記載：15.2(6)E2。影響ありとして記載：15.2(2)E9。影響ありとして記載：15.2(4)E7。影響ありとして記載：15.2(7)E。影響ありとして記載：15.2(2)E10。影響ありとして記載：15.2(4)E8。影響ありとして記載：15.2(6)E2a。影響ありとして記載：15.2(6)E2b。影響ありとして記載：15.2(7)E1。影響ありとして記載：15.2(7)E0a。影響ありとして記載：15.2(7)E0b。影響ありとして記載：15.2(7)E0s。影響ありとして記載：15.2(6)E3。影響ありとして記載：15.2(4)E9。影響ありとして記載：15.2(7)E2。影響ありとして記載：15.2(7a)E0b。影響ありとして記載：15.2(4)E10。影響ありとして記載：15.2(7)E3。影響ありとして記載：15.2(7)E1a。影響ありとして記載：15.2(7b)E0b。影響ありとして記載：15.2(7)E2a。影響ありとして記載：15.2(4)E10a。影響ありとして記載：15.2(7)E4。影響ありとして記載：15.2(7)E3k。影響ありとして記載：15.2(8)E。影響ありとして記載：15.2(8)E1。影響ありとして記載：15.2(7)E5。影響ありとして記載：15.2(7)E6。影響ありとして記載：15.2(8)E2。影響ありとして記載：15.2(4)E10d。影響ありとして記載：15.2(7)E7。影響ありとして記載：15.2(8)E3。影響ありとして記載：15.2(7)E8。影響ありとして記載：15.2(8)E4。影響ありとして記載：15.2(7)E9。影響ありとして記載：15.2(8)E5。影響ありとして記載：15.2(8)E6。影響ありとして記載：15.2(7)E10。影響ありとして記載：15.2(7)E11。影響ありとして記載：15.2(8)E7。影響ありとして記載：15.2(7)E12。影響ありとして記載：15.2(2)JB。影響ありとして記載：15.2(2)JB2。影響ありとして記載：15.2(4)JB。影響ありとして記載：15.2(2)JB3。影響ありとして記載：15.2(4)JB1。影響ありとして記載：15.2(4)JB2。影響ありとして記載：15.2(4)JB3。影響ありとして記載：15.2(4)JB3a。影響ありとして記載：15.2(2)JB4。影響ありとして記載：15.2(4)JB4。影響ありとして記載：15.2(4)JB3h。影響ありとして記載：15.2(4)JB3b。影響ありとして記載：15.2(4)JB5。影響ありとして記載：15.2(4)JB6。影響ありとして記載：15.2(2)JB5。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco IOS XE Software。影響ありとして記載：3.5.0E。影響ありとして記載：3.5.1E。影響ありとして記載：3.5.2E。影響ありとして記載：3.5.3E。影響ありとして記載：3.6.0E。影響ありとして記載：3.6.1E。影響ありとして記載：3.6.2aE。影響ありとして記載：3.6.2E。影響ありとして記載：3.6.3E。影響ありとして記載：3.6.4E。影響ありとして記載：3.6.5E。影響ありとして記載：3.6.6E。影響ありとして記載：3.6.5aE。影響ありとして記載：3.6.7E。影響ありとして記載：3.6.8E。影響ありとして記載：3.6.7bE。影響ありとして記載：3.6.9E。影響ありとして記載：3.6.10E。影響ありとして記載：3.14.0S。影響ありとして記載：3.14.1S。影響ありとして記載：3.14.2S。影響ありとして記載：3.14.3S。影響ありとして記載：3.14.4S。影響ありとして記載：3.15.0S。影響ありとして記載：3.15.1S。影響ありとして記載：3.15.2S。影響ありとして記載：3.15.1cS。影響ありとして記載：3.15.3S。影響ありとして記載：3.15.4S。影響ありとして記載：3.7.0E。影響ありとして記載：3.7.1E。影響ありとして記載：3.7.2E。影響ありとして記載：3.7.3E。影響ありとして記載：3.7.4E。影響ありとして記載：3.7.5E。影響ありとして記載：3.5.0SQ。影響ありとして記載：3.5.1SQ。影響ありとして記載：3.5.2SQ。影響ありとして記載：3.5.3SQ。影響ありとして記載：3.5.4SQ。影響ありとして記載：3.5.5SQ。影響ありとして記載：3.5.6SQ。影響ありとして記載：3.5.7SQ。影響ありとして記載：3.5.8SQ。影響ありとして記載：3.16.0S。影響ありとして記載：3.16.1S。影響ありとして記載：3.16.1aS。影響ありとして記載：3.16.2S。影響ありとして記載：3.16.2aS。影響ありとして記載：3.16.0cS。影響ありとして記載：3.16.3S。影響ありとして記載：3.16.2bS。影響ありとして記載：3.16.3aS。影響ありとして記載：3.16.4S。影響ありとして記載：3.16.4aS。影響ありとして記載：3.16.4bS。影響ありとして記載：3.16.5S。影響ありとして記載：3.16.4dS。影響ありとして記載：3.16.6S。影響ありとして記載：3.16.7S。影響ありとして記載：3.16.6bS。影響ありとして記載：3.16.7aS。影響ありとして記載：3.16.7bS。影響ありとして記載：3.16.8S。影響ありとして記載：3.16.9S。影響ありとして記載：3.16.10S。影響ありとして記載：3.17.0S。影響ありとして記載：3.17.1S。影響ありとして記載：3.17.2S。影響ありとして記載：3.17.1aS。影響ありとして記載：3.17.3S。影響ありとして記載：3.17.4S。影響ありとして記載：3.8.0E。影響ありとして記載：3.8.1E。影響ありとして記載：3.8.2E。影響ありとして記載：3.8.3E。影響ありとして記載：3.8.4E。影響ありとして記載：3.8.5E。影響ありとして記載：3.8.5aE。影響ありとして記載：3.8.6E。影響ありとして記載：3.8.7E。影響ありとして記載：3.8.8E。影響ありとして記載：3.8.9E。影響ありとして記載：3.8.10E。影響ありとして記載：3.18.0aS。影響ありとして記載：3.18.0S。影響ありとして記載：3.18.1S。影響ありとして記載：3.18.2S。影響ありとして記載：3.18.3S。影響ありとして記載：3.18.4S。影響ありとして記載：3.18.0SP。影響ありとして記載：3.18.1SP。影響ありとして記載：3.18.1aSP。影響ありとして記載：3.18.1bSP。影響ありとして記載：3.18.1cSP。影響ありとして記載：3.18.2SP。影響ありとして記載：3.18.2aSP。影響ありとして記載：3.18.3SP。影響ありとして記載：3.18.4SP。影響ありとして記載：3.18.3aSP。影響ありとして記載：3.18.3bSP。影響ありとして記載：3.18.5SP。影響ありとして記載：3.18.6SP。影響ありとして記載：3.18.7SP。影響ありとして記載：3.18.8aSP。影響ありとして記載：3.18.9SP。影響ありとして記載：3.9.0E。影響ありとして記載：3.9.1E。影響ありとして記載：3.9.2E。影響ありとして記載：16.6.1。影響ありとして記載：16.6.2。影響ありとして記載：16.6.3。影響ありとして記載：16.6.4。影響ありとして記載：16.6.5。影響ありとして記載：16.6.4a。影響ありとして記載：16.6.5a。影響ありとして記載：16.6.6。影響ありとして記載：16.6.7。影響ありとして記載：16.6.8。影響ありとして記載：16.6.9。影響ありとして記載：16.6.10。影響ありとして記載：16.7.1。影響ありとして記載：16.7.1a。影響ありとして記載：16.7.1b。影響ありとして記載：16.7.2。影響ありとして記載：16.7.3。影響ありとして記載：16.7.4。影響ありとして記載：16.8.1。影響ありとして記載：16.8.1a。影響ありとして記載：16.8.1b。影響ありとして記載：16.8.1s。影響ありとして記載：16.8.1c。影響ありとして記載：16.8.1d。影響ありとして記載：16.8.2。影響ありとして記載：16.8.1e。影響ありとして記載：16.8.3。影響ありとして記載：16.9.1。影響ありとして記載：16.9.2。影響ありとして記載：16.9.1a。影響ありとして記載：16.9.1b。影響ありとして記載：16.9.1s。影響ありとして記載：16.9.3。影響ありとして記載：16.9.4。影響ありとして記載：16.9.3a。影響ありとして記載：16.9.5。影響ありとして記載：16.9.5f。影響ありとして記載：16.9.6。影響ありとして記載：16.9.7。影響ありとして記載：16.9.8。影響ありとして記載：16.10.1。影響ありとして記載：16.10.1a。影響ありとして記載：16.10.1b。影響ありとして記載：16.10.1s。影響ありとして記載：16.10.1c。影響ありとして記載：16.10.1e。影響ありとして記載：16.10.1d。影響ありとして記載：16.10.2。影響ありとして記載：16.10.1f。影響ありとして記載：16.10.1g。影響ありとして記載：16.10.3。影響ありとして記載：3.10.0E。影響ありとして記載：3.10.1E。影響ありとして記載：3.10.0cE。影響ありとして記載：3.10.2E。影響ありとして記載：3.10.3E。影響ありとして記載：16.11.1。影響ありとして記載：16.11.1a。影響ありとして記載：16.11.1b。影響ありとして記載：16.11.2。影響ありとして記載：16.11.1s。影響ありとして記載：16.12.1。影響ありとして記載：16.12.1s。影響ありとして記載：16.12.1a。影響ありとして記載：16.12.1c。影響ありとして記載：16.12.1w。影響ありとして記載：16.12.2。影響ありとして記載：16.12.1y。影響ありとして記載：16.12.2a。影響ありとして記載：16.12.3。影響ありとして記載：16.12.8。影響ありとして記載：16.12.2s。影響ありとして記載：16.12.1x。影響ありとして記載：16.12.1t。影響ありとして記載：16.12.4。影響ありとして記載：16.12.3s。影響ありとして記載：16.12.3a。影響ありとして記載：16.12.4a。影響ありとして記載：16.12.5。影響ありとして記載：16.12.6。影響ありとして記載：16.12.1z1。影響ありとして記載：16.12.5a。影響ありとして記載：16.12.5b。影響ありとして記載：16.12.1z2。影響ありとして記載：16.12.6a。影響ありとして記載：16.12.7。影響ありとして記載：16.12.9。影響ありとして記載：16.12.10。影響ありとして記載：16.12.10a。影響ありとして記載：16.12.11。影響ありとして記載：16.12.12。影響ありとして記載：16.12.13。影響ありとして記載：3.11.0E。影響ありとして記載：3.11.1E。影響ありとして記載：3.11.2E。影響ありとして記載：3.11.3E。影響ありとして記載：3.11.1aE。影響ありとして記載：3.11.4E。影響ありとして記載：3.11.3aE。影響ありとして記載：3.11.5E。影響ありとして記載：3.11.6E。影響ありとして記載：3.11.7E。影響ありとして記載：3.11.8E。影響ありとして記載：3.11.9E。影響ありとして記載：3.11.10E。影響ありとして記載：3.11.11E。影響ありとして記載：3.11.12E。影響ありとして記載：17.1.1。影響ありとして記載：17.1.1a。影響ありとして記載：17.1.1s。影響ありとして記載：17.1.1t。影響ありとして記載：17.1.3。影響ありとして記載：17.2.1。影響ありとして記載：17.2.1r。影響ありとして記載：17.2.1a。影響ありとして記載：17.2.1v。影響ありとして記載：17.2.2。影響ありとして記載：17.2.3。影響ありとして記載：17.3.1。影響ありとして記載：17.3.2。影響ありとして記載：17.3.3。影響ありとして記載：17.3.1a。影響ありとして記載：17.3.1w。影響ありとして記載：17.3.2a。影響ありとして記載：17.3.1x。影響ありとして記載：17.3.1z。影響ありとして記載：17.3.4。影響ありとして記載：17.3.5。影響ありとして記載：17.3.4a。影響ありとして記載：17.3.6。影響ありとして記載：17.3.4b。影響ありとして記載：17.3.4c。影響ありとして記載：17.3.5a。影響ありとして記載：17.3.5b。影響ありとして記載：17.3.7。影響ありとして記載：17.3.8。影響ありとして記載：17.3.8a。影響ありとして記載：17.4.1。影響ありとして記載：17.4.2。影響ありとして記載：17.4.1a。影響ありとして記載：17.4.1b。影響ありとして記載：17.4.2a。影響ありとして記載：17.5.1。影響ありとして記載：17.5.1a。影響ありとして記載：17.6.1。影響ありとして記載：17.6.2。影響ありとして記載：17.6.1w。影響ありとして記載：17.6.1a。影響ありとして記載：17.6.1x。影響ありとして記載：17.6.3。影響ありとして記載：17.6.1y。影響ありとして記載：17.6.1z。影響ありとして記載：17.6.3a。影響ありとして記載：17.6.4。影響ありとして記載：17.6.1z1。影響ありとして記載：17.6.5。影響ありとして記載：17.6.6。影響ありとして記載：17.6.6a。影響ありとして記載：17.6.5a。影響ありとして記載：17.6.7。影響ありとして記載：17.6.8。影響ありとして記載：17.6.8a。影響ありとして記載：17.7.1。影響ありとして記載：17.7.1a。影響ありとして記載：17.7.1b。影響ありとして記載：17.7.2。影響ありとして記載：17.10.1。影響ありとして記載：17.10.1a。影響ありとして記載：17.10.1b。影響ありとして記載：17.8.1。影響ありとして記載：17.8.1a。影響ありとして記載：17.9.1。影響ありとして記載：17.9.1w。影響ありとして記載：17.9.2。影響ありとして記載：17.9.1a。影響ありとして記載：17.9.1x。影響ありとして記載：17.9.1y。影響ありとして記載：17.9.3。影響ありとして記載：17.9.2a。影響ありとして記載：17.9.1x1。影響ありとして記載：17.9.3a。影響ありとして記載：17.9.4。影響ありとして記載：17.9.1y1。影響ありとして記載：17.9.5。影響ありとして記載：17.9.4a。影響ありとして記載：17.9.5a。影響ありとして記載：17.9.5b。影響ありとして記載：17.9.6。影響ありとして記載：17.9.6a。影響ありとして記載：17.9.7。影響ありとして記載：17.9.5e。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Cisco / Cisco IOS XE Catalyst SD-WAN。影響ありとして記載：16.9.1。影響ありとして記載：16.9.2。影響ありとして記載：16.9.3。影響ありとして記載：16.9.4。影響ありとして記載：16.10.1。影響ありとして記載：16.10.2。影響ありとして記載：16.10.3。影響ありとして記載：16.10.3a。影響ありとして記載：16.10.3b。影響ありとして記載：16.10.4。影響ありとして記載：16.10.5。影響ありとして記載：16.10.6。影響ありとして記載：16.11.1a。影響ありとして記載：16.12.1b。影響ありとして記載：16.12.1d。影響ありとして記載：16.12.1e。影響ありとして記載：16.12.2r。影響ありとして記載：16.12.3。影響ありとして記載：16.12.4。影響ありとして記載：16.12.4a。影響ありとして記載：16.12.5。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E2" ] }, { "text": "「IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WAN」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20352", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "https://nvd.nist.gov/vuln/detail/CVE-2025-20352" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-20352", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "https://nvd.nist.gov/vuln/detail/CVE-2025-20352" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20352", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "https://nvd.nist.gov/vuln/detail/CVE-2025-20352" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20352", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20352", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following:\r\n\r \r An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. \r An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. \r \r An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. \r\n\r This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.\r\n\r Note: This vulnerability affects all versions of SNMP.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"IOS\",\"versions\":[{\"version\":\"12.2(55)SE\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE3\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE2\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE1\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE1\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE4\",\"status\":\"affected\"},{\"version\":\"12.2(58)SE2\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE5\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE6\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE7\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE8\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE9\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE10\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE11\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE12\",\"status\":\"affected\"},{\"version\":\"12.2(55)SE13\",\"status\":\"affected\"},{\"version\":\"12.2(58)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(53)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(55)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ1\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ2\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ3\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ4\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ5\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ6\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ7\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ8\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ9\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ10\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ11\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ12\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ13\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ14\",\"status\":\"affected\"},{\"version\":\"12.2(60)EZ15\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI2\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI3\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI5\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI4a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI4\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI2a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI6\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI7\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI1\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI8\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI9\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI8a\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI10\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI11\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI12\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI13\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXI14\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ2\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ1\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ3\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ4\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ5\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ6\",\"status\":\"affected\"},{\"version\":\"12.2(50)SQ7\",\"status\":\"affected\"},{\"version\":\"15.3(1)T\",\"status\":\"affected\"},{\"version\":\"15.3(2)T\",\"status\":\"affected\"},{\"version\":\"15.3(1)T1\",\"status\":\"affected\"},{\"version\":\"15.3(1)T2\",\"status\":\"affected\"},{\"version\":\"15.3(1)T3\",\"status\":\"affected\"},{\"version\":\"15.3(1)T4\",\"status\":\"affected\"},{\"version\":\"15.3(2)T1\",\"status\":\"affected\"},{\"version\":\"15.3(2)T2\",\"status\":\"affected\"},{\"version\":\"15.3(2)T3\",\"status\":\"affected\"},{\"version\":\"15.3(2)T4\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY1\",\"status\":\"affected\"},{\"version\":\"15.0(1)EY2\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY1\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY2\",\"status\":\"affected\"},{\"version\":\"15.0(2)EY3\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE1\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE2\",\"status\":\"affected\"},{\"version\":\"15.0(1)SE3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE1\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE2\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE4\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE5\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE6\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE7\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE8\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE9\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE10\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE11\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE10a\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE12\",\"status\":\"affected\"},{\"version\":\"15.0(2)SE13\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY7\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY8\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY7a\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY9\",\"status\":\"affected\"},{\"version\":\"15.0(1)SY10\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ1\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ2\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ3\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ4\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ5\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ6\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ7\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ8\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ9\",\"status\":\"affected\"},{\"version\":\"12.2(33)SXJ10\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG1\",\"status\":\"affected\"},{\"version\":\"15.1(1)SG2\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG2\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG3\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG4\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG7\",\"status\":\"affected\"},{\"version\":\"15.1(2)SG8\",\"status\":\"affected\"},{\"version\":\"15.2(4)M\",\"status\":\"affected\"},{\"version\":\"15.2(4)M1\",\"status\":\"affected\"},{\"version\":\"15.2(4)M2\",\"status\":\"affected\"},{\"version\":\"15.2(4)M4\",\"status\":\"affected\"},{\"version\":\"15.2(4)M3\",\"status\":\"affected\"},{\"version\":\"15.2(4)M5\",\"status\":\"affected\"},{\"version\":\"15.2(4)M8\",\"status\":\"affected\"},{\"version\":\"15.2(4)M10\",\"status\":\"affected\"},{\"version\":\"15.2(4)M7\",\"status\":\"affected\"},{\"version\":\"15.2(4)M6\",\"status\":\"affected\"},{\"version\":\"15.2(4)M9\",\"status\":\"affected\"},{\"version\":\"15.2(4)M6a\",\"status\":\"affected\"},{\"version\":\"15.2(4)M11\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG1\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG2\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG3\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG4\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG5\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG6\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG7\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG8\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG9\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG10\",\"status\":\"affected\"},{\"version\":\"15.0(2)SG11\",\"status\":\"affected\"},{\"version\":\"15.2(2)GC\",\"status\":\"affected\"},{\"version\":\"15.2(3)GC\",\"status\":\"affected\"},{\"version\":\"15.2(3)GC1\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC1\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC2\",\"status\":\"affected\"},{\"version\":\"15.2(4)GC3\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY1\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY2\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY3\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY4\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY5\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY4a\",\"status\":\"affected\"},{\"version\":\"15.1(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY6\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY7\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY8\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY9\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY10\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY11\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY12\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY13\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY14\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY15\",\"status\":\"affected\"},{\"version\":\"15.1(2)SY16\",\"status\":\"affected\"},{\"version\":\"15.4(1)T\",\"status\":\"affected\"},{\"version\":\"15.4(2)T\",\"status\":\"affected\"},{\"version\":\"15.4(1)T2\",\"status\":\"affected\"},{\"version\":\"15.4(1)T1\",\"status\":\"affected\"},{\"version\":\"15.4(1)T3\",\"status\":\"affected\"},{\"version\":\"15.4(2)T1\",\"status\":\"affected\"},{\"version\":\"15.4(2)T3\",\"status\":\"affected\"},{\"version\":\"15.4(2)T2\",\"status\":\"affected\"},{\"version\":\"15.4(1)T4\",\"status\":\"affected\"},{\"version\":\"15.4(2)T4\",\"status\":\"affected\"},{\"version\":\"15.0(2)EA\",\"status\":\"affected\"},{\"version\":\"15.0(2)EA1\",\"status\":\"affected\"},{\"version\":\"15.2(1)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E\",\"status\":\"affected\"},{\"version\":\"15.2(1)E1\",\"status\":\"affected\"},{\"version\":\"15.2(3)E\",\"status\":\"affected\"},{\"version\":\"15.2(1)E2\",\"status\":\"affected\"},{\"version\":\"15.2(1)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2)E1\",\"status\":\"affected\"},{\"version\":\"15.2(4)E\",\"status\":\"affected\"},{\"version\":\"15.2(3)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E2\",\"status\":\"affected\"},{\"version\":\"15.2(2a)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2a)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3a)E\",\"status\":\"affected\"},{\"version\":\"15.2(3)E3\",\"status\":\"affected\"},{\"version\":\"15.2(4)E1\",\"status\":\"affected\"},{\"version\":\"15.2(2)E4\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5\",\"status\":\"affected\"},{\"version\":\"15.2(4)E2\",\"status\":\"affected\"},{\"version\":\"15.2(3)E4\",\"status\":\"affected\"},{\"version\":\"15.2(5)E\",\"status\":\"affected\"},{\"version\":\"15.2(4)E3\",\"status\":\"affected\"},{\"version\":\"15.2(2)E6\",\"status\":\"affected\"},{\"version\":\"15.2(5a)E\",\"status\":\"affected\"},{\"version\":\"15.2(5)E1\",\"status\":\"affected\"},{\"version\":\"15.2(5b)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5a\",\"status\":\"affected\"},{\"version\":\"15.2(5c)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E5b\",\"status\":\"affected\"},{\"version\":\"15.2(5a)E1\",\"status\":\"affected\"},{\"version\":\"15.2(4)E4\",\"status\":\"affected\"},{\"version\":\"15.2(2)E7\",\"status\":\"affected\"},{\"version\":\"15.2(5)E2\",\"status\":\"affected\"},{\"version\":\"15.2(6)E\",\"status\":\"affected\"},{\"version\":\"15.2(4)E5\",\"status\":\"affected\"},{\"version\":\"15.2(5)E2c\",\"status\":\"affected\"},{\"version\":\"15.2(2)E8\",\"status\":\"affected\"},{\"version\":\"15.2(6)E0a\",\"status\":\"affected\"},{\"version\":\"15.2(6)E1\",\"status\":\"affected\"},{\"version\":\"15.2(6)E0c\",\"status\":\"affected\"},{\"version\":\"15.2(4)E6\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2\",\"status\":\"affected\"},{\"version\":\"15.2(2)E9\",\"status\":\"affected\"},{\"version\":\"15.2(4)E7\",\"status\":\"affected\"},{\"version\":\"15.2(7)E\",\"status\":\"affected\"},{\"version\":\"15.2(2)E10\",\"status\":\"affected\"},{\"version\":\"15.2(4)E8\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2a\",\"status\":\"affected\"},{\"version\":\"15.2(6)E2b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E1\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0a\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E0s\",\"status\":\"affected\"},{\"version\":\"15.2(6)E3\",\"status\":\"affected\"},{\"version\":\"15.2(4)E9\",\"status\":\"affected\"},{\"version\":\"15.2(7)E2\",\"status\":\"affected\"},{\"version\":\"15.2(7a)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10\",\"status\":\"affected\"},{\"version\":\"15.2(7)E3\",\"status\":\"affected\"},{\"version\":\"15.2(7)E1a\",\"status\":\"affected\"},{\"version\":\"15.2(7b)E0b\",\"status\":\"affected\"},{\"version\":\"15.2(7)E2a\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10a\",\"status\":\"affected\"},{\"version\":\"15.2(7)E4\",\"status\":\"affected\"},{\"version\":\"15.2(7)E3k\",\"status\":\"affected\"},{\"version\":\"15.2(8)E\",\"status\":\"affected\"},{\"version\":\"15.2(8)E1\",\"status\":\"affected\"},{\"version\":\"15.2(7)E5\",\"status\":\"affected\"},{\"version\":\"15.2(7)E6\",\"status\":\"affected\"},{\"version\":\"15.2(8)E2\",\"status\":\"affected\"},{\"version\":\"15.2(4)E10d\",\"status\":\"affected\"},{\"version\":\"15.2(7)E7\",\"status\":\"affected\"},{\"version\":\"15.2(8)E3\",\"status\":\"affected\"},{\"version\":\"15.2(7)E8\",\"status\":\"affected\"},{\"version\":\"15.2(8)E4\",\"status\":\"affected\"},{\"version\":\"15.2(7)E9\",\"status\":\"affected\"},{\"version\":\"15.2(8)E5\",\"status\":\"affected\"},{\"version\":\"15.2(8)E6\",\"status\":\"affected\"},{\"version\":\"15.2(7)E10\",\"status\":\"affected\"},{\"version\":\"15.2(7)E11\",\"status\":\"affected\"},{\"version\":\"15.2(8)E7\",\"status\":\"affected\"},{\"version\":\"15.2(7)E12\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB2\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB3\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB1\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB2\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3a\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB4\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB4\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3h\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB3b\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB5\",\"status\":\"affected\"},{\"version\":\"15.2(4)JB6\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB5\",\"status\":\"affected\"},{\"version\":\"15.2(2)JB6\",\"status\":\"affected\"},{\"version\":\"15.2(2)JAX\",\"status\":\"affected\"},{\"version\":\"15.3(3)M\",\"status\":\"affected\"},{\"version\":\"15.3(3)M1\",\"status\":\"affected\"},{\"version\":\"15.3(3)M2\",\"status\":\"affected\"},{\"version\":\"15.3(3)M3\",\"status\":\"affected\"},{\"version\":\"15.3(3)M5\",\"status\":\"affected\"},{\"version\":\"15.3(3)M4\",\"status\":\"affected\"},{\"version\":\"15.3(3)M6\",\"status\":\"affected\"},{\"version\":\"15.3(3)M7\",\"status\":\"affected\"},{\"version\":\"15.3(3)M8\",\"status\":\"affected\"},{\"version\":\"15.3(3)M9\",\"status\":\"affected\"},{\"version\":\"15.3(3)M10\",\"status\":\"affected\"},{\"version\":\"15.3(3)M8a\",\"status\":\"affected\"},{\"version\":\"15.2(4)JN\",\"status\":\"affected\"},{\"version\":\"15.2(1)EY\",\"status\":\"affected\"},{\"version\":\"15.0(2)EJ\",\"status\":\"affected\"},{\"version\":\"15.0(2)EJ1\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY1\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY0a\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY2\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY1a\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY1\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY2\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY3\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY4\",\"status\":\"affected\"},{\"version\":\"15.2(2)SY3\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY5\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY6\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY7\",\"status\":\"affected\"},{\"version\":\"15.2(1)SY8\",\"status\":\"affected\"},{\"version\":\"15.2(5)EX\",\"status\":\"affected\"},{\"version\":\"15.0(2)EK\",\"status\":\"affected\"},{\"version\":\"15.0(2)EK1\",\"status\":\"affected\"},{\"version\":\"15.4(1)CG\",\"status\":\"affected\"},{\"version\":\"15.4(1)CG1\",\"status\":\"affected\"},{\"version\":\"15.4(2)CG\",\"status\":\"affected\"},{\"version\":\"15.5(1)S\",\"status\":\"affected\"},{\"version\":\"15.5(2)S\",\"status\":\"affected\"},{\"version\":\"15.5(1)S1\",\"status\":\"affected\"},{\"version\":\"15.5(3)S\",\"status\":\"affected\"},{\"version\":\"15.5(1)S2\",\"status\":\"affected\"},{\"version\":\"15.5(1)S3\",\"status\":\"affected\"},{\"version\":\"15.5(2)S1\",\"status\":\"affected\"},{\"version\":\"15.5(2)S2\",\"status\":\"affected\"},{\"version\":\"15.5(3)S1\",\"status\":\"affected\"},{\"version\":\"15.5(3)S1a\",\"status\":\"affected\"},{\"version\":\"15.5(2)S3\",\"status\":\"affected\"},{\"version\":\"15.5(3)S2\",\"status\":\"affected\"},{\"version\":\"15.5(3)S0a\",\"status\":\"affected\"},{\"version\":\"15.5(3)S3\",\"status\":\"affected\"},{\"version\":\"15.5(1)S4\",\"status\":\"affected\"},{\"version\":\"15.5(2)S4\",\"status\":\"affec", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco IOS XE Software\",\"versions\":[{\"version\":\"3.5.0E\",\"status\":\"affected\"},{\"version\":\"3.5.1E\",\"status\":\"affected\"},{\"version\":\"3.5.2E\",\"status\":\"affected\"},{\"version\":\"3.5.3E\",\"status\":\"affected\"},{\"version\":\"3.6.0E\",\"status\":\"affected\"},{\"version\":\"3.6.1E\",\"status\":\"affected\"},{\"version\":\"3.6.2aE\",\"status\":\"affected\"},{\"version\":\"3.6.2E\",\"status\":\"affected\"},{\"version\":\"3.6.3E\",\"status\":\"affected\"},{\"version\":\"3.6.4E\",\"status\":\"affected\"},{\"version\":\"3.6.5E\",\"status\":\"affected\"},{\"version\":\"3.6.6E\",\"status\":\"affected\"},{\"version\":\"3.6.5aE\",\"status\":\"affected\"},{\"version\":\"3.6.7E\",\"status\":\"affected\"},{\"version\":\"3.6.8E\",\"status\":\"affected\"},{\"version\":\"3.6.7bE\",\"status\":\"affected\"},{\"version\":\"3.6.9E\",\"status\":\"affected\"},{\"version\":\"3.6.10E\",\"status\":\"affected\"},{\"version\":\"3.14.0S\",\"status\":\"affected\"},{\"version\":\"3.14.1S\",\"status\":\"affected\"},{\"version\":\"3.14.2S\",\"status\":\"affected\"},{\"version\":\"3.14.3S\",\"status\":\"affected\"},{\"version\":\"3.14.4S\",\"status\":\"affected\"},{\"version\":\"3.15.0S\",\"status\":\"affected\"},{\"version\":\"3.15.1S\",\"status\":\"affected\"},{\"version\":\"3.15.2S\",\"status\":\"affected\"},{\"version\":\"3.15.1cS\",\"status\":\"affected\"},{\"version\":\"3.15.3S\",\"status\":\"affected\"},{\"version\":\"3.15.4S\",\"status\":\"affected\"},{\"version\":\"3.7.0E\",\"status\":\"affected\"},{\"version\":\"3.7.1E\",\"status\":\"affected\"},{\"version\":\"3.7.2E\",\"status\":\"affected\"},{\"version\":\"3.7.3E\",\"status\":\"affected\"},{\"version\":\"3.7.4E\",\"status\":\"affected\"},{\"version\":\"3.7.5E\",\"status\":\"affected\"},{\"version\":\"3.5.0SQ\",\"status\":\"affected\"},{\"version\":\"3.5.1SQ\",\"status\":\"affected\"},{\"version\":\"3.5.2SQ\",\"status\":\"affected\"},{\"version\":\"3.5.3SQ\",\"status\":\"affected\"},{\"version\":\"3.5.4SQ\",\"status\":\"affected\"},{\"version\":\"3.5.5SQ\",\"status\":\"affected\"},{\"version\":\"3.5.6SQ\",\"status\":\"affected\"},{\"version\":\"3.5.7SQ\",\"status\":\"affected\"},{\"version\":\"3.5.8SQ\",\"status\":\"affected\"},{\"version\":\"3.16.0S\",\"status\":\"affected\"},{\"version\":\"3.16.1S\",\"status\":\"affected\"},{\"version\":\"3.16.1aS\",\"status\":\"affected\"},{\"version\":\"3.16.2S\",\"status\":\"affected\"},{\"version\":\"3.16.2aS\",\"status\":\"affected\"},{\"version\":\"3.16.0cS\",\"status\":\"affected\"},{\"version\":\"3.16.3S\",\"status\":\"affected\"},{\"version\":\"3.16.2bS\",\"status\":\"affected\"},{\"version\":\"3.16.3aS\",\"status\":\"affected\"},{\"version\":\"3.16.4S\",\"status\":\"affected\"},{\"version\":\"3.16.4aS\",\"status\":\"affected\"},{\"version\":\"3.16.4bS\",\"status\":\"affected\"},{\"version\":\"3.16.5S\",\"status\":\"affected\"},{\"version\":\"3.16.4dS\",\"status\":\"affected\"},{\"version\":\"3.16.6S\",\"status\":\"affected\"},{\"version\":\"3.16.7S\",\"status\":\"affected\"},{\"version\":\"3.16.6bS\",\"status\":\"affected\"},{\"version\":\"3.16.7aS\",\"status\":\"affected\"},{\"version\":\"3.16.7bS\",\"status\":\"affected\"},{\"version\":\"3.16.8S\",\"status\":\"affected\"},{\"version\":\"3.16.9S\",\"status\":\"affected\"},{\"version\":\"3.16.10S\",\"status\":\"affected\"},{\"version\":\"3.17.0S\",\"status\":\"affected\"},{\"version\":\"3.17.1S\",\"status\":\"affected\"},{\"version\":\"3.17.2S\",\"status\":\"affected\"},{\"version\":\"3.17.1aS\",\"status\":\"affected\"},{\"version\":\"3.17.3S\",\"status\":\"affected\"},{\"version\":\"3.17.4S\",\"status\":\"affected\"},{\"version\":\"3.8.0E\",\"status\":\"affected\"},{\"version\":\"3.8.1E\",\"status\":\"affected\"},{\"version\":\"3.8.2E\",\"status\":\"affected\"},{\"version\":\"3.8.3E\",\"status\":\"affected\"},{\"version\":\"3.8.4E\",\"status\":\"affected\"},{\"version\":\"3.8.5E\",\"status\":\"affected\"},{\"version\":\"3.8.5aE\",\"status\":\"affected\"},{\"version\":\"3.8.6E\",\"status\":\"affected\"},{\"version\":\"3.8.7E\",\"status\":\"affected\"},{\"version\":\"3.8.8E\",\"status\":\"affected\"},{\"version\":\"3.8.9E\",\"status\":\"affected\"},{\"version\":\"3.8.10E\",\"status\":\"affected\"},{\"version\":\"3.18.0aS\",\"status\":\"affected\"},{\"version\":\"3.18.0S\",\"status\":\"affected\"},{\"version\":\"3.18.1S\",\"status\":\"affected\"},{\"version\":\"3.18.2S\",\"status\":\"affected\"},{\"version\":\"3.18.3S\",\"status\":\"affected\"},{\"version\":\"3.18.4S\",\"status\":\"affected\"},{\"version\":\"3.18.0SP\",\"status\":\"affected\"},{\"version\":\"3.18.1SP\",\"status\":\"affected\"},{\"version\":\"3.18.1aSP\",\"status\":\"affected\"},{\"version\":\"3.18.1bSP\",\"status\":\"affected\"},{\"version\":\"3.18.1cSP\",\"status\":\"affected\"},{\"version\":\"3.18.2SP\",\"status\":\"affected\"},{\"version\":\"3.18.2aSP\",\"status\":\"affected\"},{\"version\":\"3.18.3SP\",\"status\":\"affected\"},{\"version\":\"3.18.4SP\",\"status\":\"affected\"},{\"version\":\"3.18.3aSP\",\"status\":\"affected\"},{\"version\":\"3.18.3bSP\",\"status\":\"affected\"},{\"version\":\"3.18.5SP\",\"status\":\"affected\"},{\"version\":\"3.18.6SP\",\"status\":\"affected\"},{\"version\":\"3.18.7SP\",\"status\":\"affected\"},{\"version\":\"3.18.8aSP\",\"status\":\"affected\"},{\"version\":\"3.18.9SP\",\"status\":\"affected\"},{\"version\":\"3.9.0E\",\"status\":\"affected\"},{\"version\":\"3.9.1E\",\"status\":\"affected\"},{\"version\":\"3.9.2E\",\"status\":\"affected\"},{\"version\":\"16.6.1\",\"status\":\"affected\"},{\"version\":\"16.6.2\",\"status\":\"affected\"},{\"version\":\"16.6.3\",\"status\":\"affected\"},{\"version\":\"16.6.4\",\"status\":\"affected\"},{\"version\":\"16.6.5\",\"status\":\"affected\"},{\"version\":\"16.6.4a\",\"status\":\"affected\"},{\"version\":\"16.6.5a\",\"status\":\"affected\"},{\"version\":\"16.6.6\",\"status\":\"affected\"},{\"version\":\"16.6.7\",\"status\":\"affected\"},{\"version\":\"16.6.8\",\"status\":\"affected\"},{\"version\":\"16.6.9\",\"status\":\"affected\"},{\"version\":\"16.6.10\",\"status\":\"affected\"},{\"version\":\"16.7.1\",\"status\":\"affected\"},{\"version\":\"16.7.1a\",\"status\":\"affected\"},{\"version\":\"16.7.1b\",\"status\":\"affected\"},{\"version\":\"16.7.2\",\"status\":\"affected\"},{\"version\":\"16.7.3\",\"status\":\"affected\"},{\"version\":\"16.7.4\",\"status\":\"affected\"},{\"version\":\"16.8.1\",\"status\":\"affected\"},{\"version\":\"16.8.1a\",\"status\":\"affected\"},{\"version\":\"16.8.1b\",\"status\":\"affected\"},{\"version\":\"16.8.1s\",\"status\":\"affected\"},{\"version\":\"16.8.1c\",\"status\":\"affected\"},{\"version\":\"16.8.1d\",\"status\":\"affected\"},{\"version\":\"16.8.2\",\"status\":\"affected\"},{\"version\":\"16.8.1e\",\"status\":\"affected\"},{\"version\":\"16.8.3\",\"status\":\"affected\"},{\"version\":\"16.9.1\",\"status\":\"affected\"},{\"version\":\"16.9.2\",\"status\":\"affected\"},{\"version\":\"16.9.1a\",\"status\":\"affected\"},{\"version\":\"16.9.1b\",\"status\":\"affected\"},{\"version\":\"16.9.1s\",\"status\":\"affected\"},{\"version\":\"16.9.3\",\"status\":\"affected\"},{\"version\":\"16.9.4\",\"status\":\"affected\"},{\"version\":\"16.9.3a\",\"status\":\"affected\"},{\"version\":\"16.9.5\",\"status\":\"affected\"},{\"version\":\"16.9.5f\",\"status\":\"affected\"},{\"version\":\"16.9.6\",\"status\":\"affected\"},{\"version\":\"16.9.7\",\"status\":\"affected\"},{\"version\":\"16.9.8\",\"status\":\"affected\"},{\"version\":\"16.10.1\",\"status\":\"affected\"},{\"version\":\"16.10.1a\",\"status\":\"affected\"},{\"version\":\"16.10.1b\",\"status\":\"affected\"},{\"version\":\"16.10.1s\",\"status\":\"affected\"},{\"version\":\"16.10.1c\",\"status\":\"affected\"},{\"version\":\"16.10.1e\",\"status\":\"affected\"},{\"version\":\"16.10.1d\",\"status\":\"affected\"},{\"version\":\"16.10.2\",\"status\":\"affected\"},{\"version\":\"16.10.1f\",\"status\":\"affected\"},{\"version\":\"16.10.1g\",\"status\":\"affected\"},{\"version\":\"16.10.3\",\"status\":\"affected\"},{\"version\":\"3.10.0E\",\"status\":\"affected\"},{\"version\":\"3.10.1E\",\"status\":\"affected\"},{\"version\":\"3.10.0cE\",\"status\":\"affected\"},{\"version\":\"3.10.2E\",\"status\":\"affected\"},{\"version\":\"3.10.3E\",\"status\":\"affected\"},{\"version\":\"16.11.1\",\"status\":\"affected\"},{\"version\":\"16.11.1a\",\"status\":\"affected\"},{\"version\":\"16.11.1b\",\"status\":\"affected\"},{\"version\":\"16.11.2\",\"status\":\"affected\"},{\"version\":\"16.11.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1\",\"status\":\"affected\"},{\"version\":\"16.12.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1a\",\"status\":\"affected\"},{\"version\":\"16.12.1c\",\"status\":\"affected\"},{\"version\":\"16.12.1w\",\"status\":\"affected\"},{\"version\":\"16.12.2\",\"status\":\"affected\"},{\"version\":\"16.12.1y\",\"status\":\"affected\"},{\"version\":\"16.12.2a\",\"status\":\"affected\"},{\"version\":\"16.12.3\",\"status\":\"affected\"},{\"version\":\"16.12.8\",\"status\":\"affected\"},{\"version\":\"16.12.2s\",\"status\":\"affected\"},{\"version\":\"16.12.1x\",\"status\":\"affected\"},{\"version\":\"16.12.1t\",\"status\":\"affected\"},{\"version\":\"16.12.4\",\"status\":\"affected\"},{\"version\":\"16.12.3s\",\"status\":\"affected\"},{\"version\":\"16.12.3a\",\"status\":\"affected\"},{\"version\":\"16.12.4a\",\"status\":\"affected\"},{\"version\":\"16.12.5\",\"status\":\"affected\"},{\"version\":\"16.12.6\",\"status\":\"affected\"},{\"version\":\"16.12.1z1\",\"status\":\"affected\"},{\"version\":\"16.12.5a\",\"status\":\"affected\"},{\"version\":\"16.12.5b\",\"status\":\"affected\"},{\"version\":\"16.12.1z2\",\"status\":\"affected\"},{\"version\":\"16.12.6a\",\"status\":\"affected\"},{\"version\":\"16.12.7\",\"status\":\"affected\"},{\"version\":\"16.12.9\",\"status\":\"affected\"},{\"version\":\"16.12.10\",\"status\":\"affected\"},{\"version\":\"16.12.10a\",\"status\":\"affected\"},{\"version\":\"16.12.11\",\"status\":\"affected\"},{\"version\":\"16.12.12\",\"status\":\"affected\"},{\"version\":\"16.12.13\",\"status\":\"affected\"},{\"version\":\"3.11.0E\",\"status\":\"affected\"},{\"version\":\"3.11.1E\",\"status\":\"affected\"},{\"version\":\"3.11.2E\",\"status\":\"affected\"},{\"version\":\"3.11.3E\",\"status\":\"affected\"},{\"version\":\"3.11.1aE\",\"status\":\"affected\"},{\"version\":\"3.11.4E\",\"status\":\"affected\"},{\"version\":\"3.11.3aE\",\"status\":\"affected\"},{\"version\":\"3.11.5E\",\"status\":\"affected\"},{\"version\":\"3.11.6E\",\"status\":\"affected\"},{\"version\":\"3.11.7E\",\"status\":\"affected\"},{\"version\":\"3.11.8E\",\"status\":\"affected\"},{\"version\":\"3.11.9E\",\"status\":\"affected\"},{\"version\":\"3.11.10E\",\"status\":\"affected\"},{\"version\":\"3.11.11E\",\"status\":\"affected\"},{\"version\":\"3.11.12E\",\"status\":\"affected\"},{\"version\":\"17.1.1\",\"status\":\"affected\"},{\"version\":\"17.1.1a\",\"status\":\"affected\"},{\"version\":\"17.1.1s\",\"status\":\"affected\"},{\"version\":\"17.1.1t\",\"status\":\"affected\"},{\"version\":\"17.1.3\",\"status\":\"affected\"},{\"version\":\"17.2.1\",\"status\":\"affected\"},{\"version\":\"17.2.1r\",\"status\":\"affected\"},{\"version\":\"17.2.1a\",\"status\":\"affected\"},{\"version\":\"17.2.1v\",\"status\":\"affected\"},{\"version\":\"17.2.2\",\"status\":\"affected\"},{\"version\":\"17.2.3\",\"status\":\"affected\"},{\"version\":\"17.3.1\",\"status\":\"affected\"},{\"version\":\"17.3.2\",\"status\":\"affected\"},{\"version\":\"17.3.3\",\"status\":\"affected\"},{\"version\":\"17.3.1a\",\"status\":\"affected\"},{\"version\":\"17.3.1w\",\"status\":\"affected\"},{\"version\":\"17.3.2a\",\"status\":\"affected\"},{\"version\":\"17.3.1x\",\"status\":\"affected\"},{\"version\":\"17.3.1z\",\"status\":\"affected\"},{\"version\":\"17.3.4\",\"status\":\"affected\"},{\"version\":\"17.3.5\",\"status\":\"affected\"},{\"version\":\"17.3.4a\",\"status\":\"affected\"},{\"version\":\"17.3.6\",\"status\":\"affected\"},{\"version\":\"17.3.4b\",\"status\":\"affected\"},{\"version\":\"17.3.4c\",\"status\":\"affected\"},{\"version\":\"17.3.5a\",\"status\":\"affected\"},{\"version\":\"17.3.5b\",\"status\":\"affected\"},{\"version\":\"17.3.7\",\"status\":\"affected\"},{\"version\":\"17.3.8\",\"status\":\"affected\"},{\"version\":\"17.3.8a\",\"status\":\"affected\"},{\"version\":\"17.4.1\",\"status\":\"affected\"},{\"version\":\"17.4.2\",\"status\":\"affected\"},{\"version\":\"17.4.1a\",\"status\":\"affected\"},{\"version\":\"17.4.1b\",\"status\":\"affected\"},{\"version\":\"17.4.2a\",\"status\":\"affected\"},{\"version\":\"17.5.1\",\"status\":\"affected\"},{\"version\":\"17.5.1a\",\"status\":\"affected\"},{\"version\":\"17.6.1\",\"status\":\"affected\"},{\"version\":\"17.6.2\",\"status\":\"affected\"},{\"version\":\"17.6.1w\",\"status\":\"affected\"},{\"version\":\"17.6.1a\",\"status\":\"affected\"},{\"version\":\"17.6.1x\",\"status\":\"affected\"},{\"version\":\"17.6.3\",\"status\":\"affected\"},{\"version\":\"17.6.1y\",\"status\":\"affected\"},{\"version\":\"17.6.1z\",\"status\":\"affected\"},{\"version\":\"17.6.3a\",\"status\":\"affected\"},{\"version\":\"17.6.4\",\"status\":\"affected\"},{\"version\":\"17.6.1z1\",\"status\":\"affected\"},{\"version\":\"17.6.5\",\"status\":\"affected\"},{\"version\":\"17.6.6\",\"status\":\"affected\"},{\"version\":\"17.6.6a\",\"status\":\"affected\"},{\"version\":\"17.6.5a\",\"status\":\"affected\"},{\"version\":\"17.6.7\",\"status\":\"affected\"},{\"version\":\"17.6.8\",\"status\":\"affected\"},{\"version\":\"17.6.8a\",\"status\":\"affected\"},{\"version\":\"17.7.1\",\"status\":\"affected\"},{\"version\":\"17.7.1a\",\"status\":\"affected\"},{\"version\":\"17.7.1b\",\"status\":\"affected\"},{\"version\":\"17.7.2\",\"status\":\"affected\"},{\"version\":\"17.10.1\",\"status\":\"affected\"},{\"version\":\"17.10.1a\",\"status\":\"affected\"},{\"version\":\"17.10.1b\",\"status\":\"affected\"},{\"version\":\"17.8.1\",\"status\":\"affected\"},{\"version\":\"17.8.1a\",\"status\":\"affected\"},{\"version\":\"17.9.1\",\"status\":\"affected\"},{\"version\":\"17.9.1w\",\"status\":\"affected\"},{\"version\":\"17.9.2\",\"status\":\"affected\"},{\"version\":\"17.9.1a\",\"status\":\"affected\"},{\"version\":\"17.9.1x\",\"status\":\"affected\"},{\"version\":\"17.9.1y\",\"status\":\"affected\"},{\"version\":\"17.9.3\",\"status\":\"affected\"},{\"version\":\"17.9.2a\",\"status\":\"affected\"},{\"version\":\"17.9.1x1\",\"status\":\"affected\"},{\"version\":\"17.9.3a\",\"status\":\"affected\"},{\"version\":\"17.9.4\",\"status\":\"affected\"},{\"version\":\"17.9.1y1\",\"status\":\"affected\"},{\"version\":\"17.9.5\",\"status\":\"affected\"},{\"version\":\"17.9.4a\",\"status\":\"affected\"},{\"version\":\"17.9.5a\",\"status\":\"affected\"},{\"version\":\"17.9.5b\",\"status\":\"affected\"},{\"version\":\"17.9.6\",\"status\":\"affected\"},{\"version\":\"17.9.6a\",\"status\":\"affected\"},{\"version\":\"17.9.7\",\"status\":\"affected\"},{\"version\":\"17.9.5e\",\"status\":\"affected\"},{\"version\":\"17.9.5f\",\"status\":\"affected\"},{\"version\":\"17.9.7a\",\"status\":\"affected\"},{\"version\":\"17.9.7b\",\"status\":\"affected\"},{\"version\":\"17.11.1\",\"status\":\"affected\"},{\"version\":\"17.11.1a\",\"status\":\"affected\"},{\"version\":\"17.12.1\",\"status\":\"affected\"},{\"version\":\"17.12.1w\",\"status\":\"affected\"},{\"version\":\"17.12.1a\",\"status\":\"affected\"},{\"version\":\"17.12.1x\",\"status\":\"affected\"},{\"version\":\"17.12.2\",\"status\":\"affected\"},{\"version\":\"17.12.3\",\"status\":\"affected\"},{\"version\":\"17.12.2a\",\"status\":\"affected\"},{\"version\":\"17.12.1y\",\"status\":\"affected\"},{\"version\":\"17.12.1z\",\"status\":\"affected\"},{\"version\":\"17.12.4\",\"status\":\"affected\"},{\"version\":\"17.12.3a\",\"status\":\"affected\"},{\"version\":\"17.12.1z1\",\"status\":\"affected\"},{\"version\":\"17.12.1z2\",\"status\":\"affected\"},{\"version\":\"17.12.4a\",\"status\":\"affected\"},{\"version\":\"17.12.5\",\"status\":\"affected\"},{\"version\":\"17.12.4b\",\"status\":\"affected\"},{\"version\":\"17.12.1z3\",\"status\":\"affected\"},{\"version\":\"17.12.5a\",\"status\":\"affected\"},{\"version\":\"17.12.1z4\",\"status\":\"affected\"},{\"version\":\"17.12.5b\",\"status\":\"affected\"},{\"version\":\"17.12.5c\",\"status\":\"affected\"},{\"version\":\"17.13.1\",\"status\":\"affected\"},{\"version\":\"17.13.1a\",\"status\":\"affected\"},{\"version\":\"17.14.1\",\"status\":\"affected\"},{\"version\":\"17.14.1a\",\"status\":\"affected\"},{\"version\":\"17.15.1\",\"status\":\"affected\"},{\"version\":\"17.15.1w\",\"status\":\"affected\"},{\"version\":\"17.15.1a\",\"status\":\"affected\"},{\"version\":\"17.15.2\",\"status\":\"affected\"},{\"version\":\"17.15.1b\",\"status\":\"affected\"},{\"version\":\"17.15.1x\",\"status\":\"affected\"},{\"version\":\"17.15.1z\",\"status\":\"affected\"},{\"version\":\"17.15.3\",\"status\":\"affected\"},{\"version\":\"17.15.2c\",\"status\":\"affected\"},{\"version\":\"17.15.2a\",\"status\":\"affected\"},{\"version\":\"17.15.1y\",\"status\":\"affected\"},{\"version\":\"17.15.2b\",\"status\":\"affected\"},{\"version\":\"17.15.3a\",\"status\":\"affected\"},{\"version\":\"17.15.4\",\"status\":\"affected\"},{\"version\":\"17.15.3b\",\"status\":\"affected\"},{\"version\":\"17.16.1\",\"status\":\"affected\"},{\"version\":\"17.16.1a\",\"status\":\"affected\"},{\"version\":\"17.17.1\",\"status\":\"affected\"},{\"version\":\"17.18.1\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20352.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco IOS XE Catalyst SD-WAN\",\"versions\":[{\"version\":\"16.9.1\",\"status\":\"affected\"},{\"version\":\"16.9.2\",\"status\":\"affected\"},{\"version\":\"16.9.3\",\"status\":\"affected\"},{\"version\":\"16.9.4\",\"status\":\"affected\"},{\"version\":\"16.10.1\",\"status\":\"affected\"},{\"version\":\"16.10.2\",\"status\":\"affected\"},{\"version\":\"16.10.3\",\"status\":\"affected\"},{\"version\":\"16.10.3a\",\"status\":\"affected\"},{\"version\":\"16.10.3b\",\"status\":\"affected\"},{\"version\":\"16.10.4\",\"status\":\"affected\"},{\"version\":\"16.10.5\",\"status\":\"affected\"},{\"version\":\"16.10.6\",\"status\":\"affected\"},{\"version\":\"16.11.1a\",\"status\":\"affected\"},{\"version\":\"16.12.1b\",\"status\":\"affected\"},{\"version\":\"16.12.1d\",\"status\":\"affected\"},{\"version\":\"16.12.1e\",\"status\":\"affected\"},{\"version\":\"16.12.2r\",\"status\":\"affected\"},{\"version\":\"16.12.3\",\"status\":\"affected\"},{\"version\":\"16.12.4\",\"status\":\"affected\"},{\"version\":\"16.12.4a\",\"status\":\"affected\"},{\"version\":\"16.12.5\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20352", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-20352\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-20352（IOS / Cisco IOS XE Software / Cisco IOS XE Catalyst SD-WAN）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証済みのリモート攻撃者であり、SNMPv2c 以前の読み取り専用コミュニティ文字列、または有効な SNMPv3 ユーザー認証情報を保持している必要がある。\n・高権限でコード実行を行うには、上記の認証情報に加えて、対象デバイス上で管理者権限（特権 15）または root 権限を持つ認証情報が必要である。\n・対象となるデバイスは Cisco IOS Software または Cisco IOS XE Software を実行している必要がある。\n・公式の対象表：Cisco / IOS。影響ありとして記載：12.2(55)SE。影響ありとして記載：12.2(55)SE3。影響ありとして記載：12.2(55)SE2。影響ありとして記載：12.2(58)SE。影響ありとして記載：12.2(55)SE1。影響ありとして記載：12.2(58)SE1。影響ありとして記載：12.2(55)SE4。影響ありとして記載：12.2(58)SE2。影響ありとして記載：12.2(55)SE5。影響ありとして記載：12.2(55)SE6。影響ありとして記載：12.2(55)SE7。影響ありとして記載：12.2(55)SE8。影響ありとして記載：12.2(55)SE9。影響ありとして記載：12.2(55)SE10。影響ありとして記載：12.2(55)SE11。影響ありとして記載：12.2(55)SE12。影響ありとして記載：12.2(55)SE13。影響ありとして記載：12.2(58)EZ。影響ありとして記載：12.2(53)EZ。影響ありとして記載：12.2(55)EZ。影響ありとして記載：12.2(60)EZ。影響ありとして記載：12.2(60)EZ1。影響ありとして記載：12.2(60)EZ2。影響ありとして記載：12.2(60)EZ3。影響ありとして記載：12.2(60)EZ4。影響ありとして記載：12.2(60)EZ5。影響ありとして記載：12.2(60)EZ6。影響ありとして記載：12.2(60)EZ7。影響ありとして記載：12.2(60)EZ8。影響ありとして記載：12.2(60)EZ9。影響ありとして記載：12.2(60)EZ10。影響ありとして記載：12.2(60)EZ11。影響ありとして記載：12.2(60)EZ12。影響ありとして記載：12.2(60)EZ13。影響ありとして記載：12.2(60)EZ14。影響ありとして記載：12.2(60)EZ15。影響ありとして記載：12.2(33)SXI2。影響ありとして記載：12.2(33)SXI3。影響ありとして記載：12.2(33)SXI5。影響ありとして記載：12.2(33)SXI4a。影響ありとして記載：12.2(33)SXI4。影響ありとして記載：12.2(33)SXI2a。影響ありとして記載：12.2(33)SXI。影響ありとして記載：12.2(33)SXI6。影響ありとして記載：12.2(33)SXI7。影響ありとして記載：12.2(33)SXI1。影響ありとして記載：12.2(33)SXI8。影響ありとして記載：12.2(33)SXI9。影響ありとして記載：12.2(33)SXI8a。影響ありとして記載：12.2(33)SXI10。影響ありとして記載：12.2(33)SXI11。影響ありとして記載：12.2(33)SXI12。影響ありとして記載：12.2(33)SXI13。影響ありとして記載：12.2(33)SXI14。影響ありとして記載：12.2(50)SQ2。影響ありとして記載：12.2(50)SQ1。影響ありとして記載：12.2(50)SQ。影響ありとして記載：12.2(50)SQ3。影響ありとして記載：12.2(50)SQ4。影響ありとして記載：12.2(50)SQ5。影響ありとして記載：12.2(50)SQ6。影響ありとして記載：12.2(50)SQ7。影響ありとして記載：15.3(1)T。影響ありとして記載：15.3(2)T。影響ありとして記載：15.3(1)T1。影響ありとして記載：15.3(1)T2。影響ありとして記載：15.3(1)T3。影響ありとして記載：15.3(1)T4。影響ありとして記載：15.3(2)T1。影響ありとして記載：15.3(2)T2。影響ありとして記載：15.3(2)T3。影響ありとして記載：15.3(2)T4。影響ありとして記載：15.0(1)EY。影響ありとして記載：15.0(1)EY1。影響ありとして記載：15.0(1)EY2。影響ありとして記載：15.0(2)EY。影響ありとして記載：15.0(2)EY1。影響ありとして記載：15.0(2)EY2。影響ありとして記載：15.0(2)EY3。影響ありとして記載：15.0(1)SE。影響ありとして記載：15.0(2)SE。影響ありとして記載：15.0(1)SE1。影響ありとして記載：15.0(1)SE2。影響ありとして記載：15.0(1)SE3。影響ありとして記載：15.0(2)SE1。影響ありとして記載：15.0(2)SE2。影響ありとして記載：15.0(2)SE3。影響ありとして記載：15.0(2)SE4。影響ありとして記載：15.0(2)SE5。影響ありとして記載：15.0(2)SE6。影響ありとして記載：15.0(2)SE7。影響ありとして記載：15.0(2)SE8。影響ありとして記載：15.0(2)SE9。影響ありとして記載：15.0(2)SE10。影響ありとして記載：15.0(2)SE11。影響ありとして記載：15.0(2)SE10a。影響ありとして記載：15.0(2)SE12。影響ありとして記載：15.0(2)SE13。影響ありとして記載：15.0(1)SY。影響ありとして記載：15.0(1)SY1。影響ありとして記載：15.0(1)SY2。影響ありとして記載：15.0(1)SY3。影響ありとして記載：15.0(1)SY4。影響ありとして記載：15.0(1)SY5。影響ありとして記載：15.0(1)SY6。影響ありとして記載：15.0(1)SY7。影響ありとして記載：15.0(1)SY8。影響ありとして記載：15.0(1)SY7a。影響ありとして記載：15.0(1)SY9。影響ありとして記載：15.0(1)SY10。影響ありとして記載：12.2(33)SXJ。影響ありとして記載：12.2(33)SXJ1。影響ありとして記載：12.2(33)SXJ2。影響ありとして記載：12.2(33)SXJ3。影響ありとして記載：12.2(33)SXJ4。影響ありとして記載：12.2(33)SXJ5。影響ありとして記載：12.2(33)SXJ6。影響ありとして記載：12.2(33)SXJ7。影響ありとして記載：12.2(33)SXJ8。影響ありとして記載：12.2(33)SXJ9。影響ありとして記載：12.2(33)SXJ10。影響ありとして記載：15.1(1)SG。影響ありとして記載：15.1(2)SG。影響ありとして記載：15.1(1)SG1。影響ありとして記載：15.1(1)SG2。影響ありとして記載：15.1(2)SG1。影響ありとして記載：15.1(2)SG2。影響ありとして記載：15.1(2)SG3。影響ありとして記載：15.1(2)SG4。影響ありとして記載：15.1(2)SG5。影響ありとして記載：15.1(2)SG6。影響ありとして記載：15.1(2)SG7。影響ありとして記載：15.1(2)SG8。影響ありとして記載：15.2(4)M。影響ありとして記載：15.2(4)M1。影響ありとして記載：15.2(4)M2。影響ありとして記載：15.2(4)M4。影響ありとして記載：15.2(4)M3。影響ありとして記載：15.2(4)M5。影響ありとして記載：15.2(4)M8。影響ありとして記載：15.2(4)M10。影響ありとして記載：15.2(4)M7。影響ありとして記載：15.2(4)M6。影響ありとして記載：15.2(4)M9。影響ありとして記載：15.2(4)M6a。影響ありとして記載：15.2(4)M11。影響ありとして記載：15.0(2)SG。影響ありとして記載：15.0(2)SG1。影響ありとして記載：15.0(2)SG2。影響ありとして記載：15.0(2)SG3。影響ありとして記載：15.0(2)SG4。影響ありとして記載：15.0(2)SG5。影響ありとして記載：15.0(2)SG6。影響ありとして記載：15.0(2)SG7。影響ありとして記載：15.0(2)SG8。影響ありとして記載：15.0(2)SG9。影響ありとして記載：15.0(2)SG10。影響ありとして記載：15.0(2)SG11。影響ありとして記載：15.2(2)GC。影響ありとして記載：15.2(3)GC。影響ありとして記載：15.2(3)GC1。影響ありとして記載：15.2(4)GC。影響ありとして記載：15.2(4)GC1。影響ありとして記載：15.2(4)GC2。影響ありとして記載：15.2(4)GC3。影響ありとして記載：15.1(1)SY。影響ありとして記載：15.1(1)SY1。影響ありとして記載：15.1(2)SY。影響ありとして記載：15.1(2)SY1。影響ありとして記載：15.1(2)SY2。影響ありとして記載：15.1(1)SY2。影響ありとして記載：15.1(1)SY3。影響ありとして記載：15.1(2)SY3。影響ありとして記載：15.1(1)SY4。影響ありとして記載：15.1(2)SY4。影響ありとして記載：15.1(1)SY5。影響ありとして記載：15.1(2)SY5。影響ありとして記載：15.1(2)SY4a。影響ありとして記載：15.1(1)SY6。影響ありとして記載：15.1(2)SY6。影響ありとして記載：15.1(2)SY7。影響ありとして記載：15.1(2)SY8。影響ありとして記載：15.1(2)SY9。影響ありとして記載：15.1(2)SY10。影響ありとして記載：15.1(2)SY11。影響ありとして記載：15.1(2)SY12。影響ありとして記載：15.1(2)SY13。影響ありとして記載：15.1(2)SY14。影響ありとして記載：15.1(2)SY15。影響ありとして記載：15.1(2)SY16。影響ありとして記載：15.4(1)T。影響ありとして記載：15.4(2)T。影響ありとして記載：15.4(1)T2。影響ありとして記載：15.4(1)T1。影響ありとして記載：15.4(1)T3。影響ありとして記載：15.4(2)T1。影響ありとして記載：15.4(2)T3。影響ありとして記載：15.4(2)T2。影響ありとして記載：15.4(1)T4。影響ありとして記載：15.4(2)T4。影響ありとして記載：15.0(2)EA。影響ありとして記載：15.0(2)EA1。影響ありとして記載：15.2(1)E。影響ありとして記載：15.2(2)E。影響ありとして記載：15.2(1)E1。影響ありとして記載：15.2(3)E。影響ありとして記載：15.2(1)E2。影響ありとして記載：15.2(1)E3。影響ありとして記載：15.2(2)E1。影響ありとして記載：15.2(4)E。影響ありとして記載：15.2(3)E1。影響ありとして記載：15.2(2)E2。影響ありとして記載：15.2(2a)E1。影響ありとして記載：15.2(2)E3。影響ありとして記載：15.2(2a)E2。影響ありとして記載：15.2(3)E2。影響ありとして記載：15.2(3a)E。影響ありとして記載：15.2(3)E3。影響ありとして記載：15.2(4)E1。影響ありとして記載：15.2(2)E4。影響ありとして記載：15.2(2)E5。影響ありとして記載：15.2(4)E2。影響ありとして記載：15.2(3)E4。影響ありとして記載：15.2(5)E。影響ありとして記載：15.2(4)E3。影響ありとして記載：15.2(2)E6。影響ありとして記載：15.2(5a)E。影響ありとして記載：15.2(5)E1。影響ありとして記載：15.2(5b)E。影響ありとして記載：15.2(2)E5a。影響ありとして記載：15.2(5c)E。影響ありとして記載：15.2(2)E5b。影響ありとして記載：15.2(5a)E1。影響ありとして記載：15.2(4)E4。影響ありとして記載：15.2(2)E7。影響ありとして記載：15.2(5)E2。影響ありとして記載：15.2(6)E。影響ありとして記載：15.2(4)E5。影響ありとして記載：15.2(5)E2c。影響ありとして記載：15.2(2)E8。影響ありとして記載：15.2(6)E0a。影響ありとして記載：15.2(6)E1。影響ありとして記載：15.2(6)E0c。影響ありとして記載：15.2(4)E6。影響ありとして記載：15.2(6)E2。影響ありとして記載：15.2(2)E9。影響ありとして記載：15.2(4)E7。影響ありとして記載：15.2(7)E。影響ありとして記載：15.2(2)E10。影響ありとして記載：15.2(4)E8。影響ありとして記載：15.2(6)E2a。影響ありとして記載：15.2(6)E2b。影響ありとして記載：15.2(7)E1。影響ありとして記載：15.2(7)E0a。影響ありとして記載：15.2(7)E0b。影響ありとして記載：15.2(7)E0s。影響ありとして記載：15.2(6)E3。影響ありとして記載：15.2(4)E9。影響ありとして記載：15.2(7)E2。影響ありとして記載：15.2(7a)E0b。影響ありとして記載：15.2(4)E10。影響ありとして記載：15.2(7)E3。影響ありとして記載：15.2(7)E1a。影響ありとして記載：15.2(7b)E0b。影響ありとして記載：15.2(7)E2a。影響ありとして記載：15.2(4)E10a。影響ありとして記載：15.2(7)E4。影響ありとして記載：15.2(7)E3k。影響ありとして記載：15.2(8)E。影響ありとして記載：15.2(8)E1。影響ありとして記載：15.2(7)E5。影響ありとして記載：15.2(7)E6。影響ありとして記載：15.2(8)E2。影響ありとして記載：15.2(4)E10d。影響ありとして記載：15.2(7)E7。影響ありとして記載：15.2(8)E3。影響ありとして記載：15.2(7)E8。影響ありとして記載：15.2(8)E4。影響ありとして記載：15.2(7)E9。影響ありとして記載：15.2(8)E5。影響ありとして記載：15.2(8)E6。影響ありとして記載：15.2(7)E10。影響ありとして記載：15.2(7)E11。影響ありとして記載：15.2(8)E7。影響ありとして記載：15.2(7)E12。影響ありとして記載：15.2(2)JB。影響ありとして記載：15.2(2)JB2。影響ありとして記載：15.2(4)JB。影響ありとして記載：15.2(2)JB3。影響ありとして記載：15.2(4)JB1。影響ありとして記載：15.2(4)JB2。影響ありとして記載：15.2(4)JB3。影響ありとして記載：15.2(4)JB3a。影響ありとして記載：15.2(2)JB4。影響ありとして記載：15.2(4)JB4。影響ありとして記載：15.2(4)JB3h。影響ありとして記載：15.2(4)JB3b。影響ありとして記載：15.2(4)JB5。影響ありとして記載：15.2(4)JB6。影響ありとして記載：15.2(2)JB5。\n・公式の対象表：Cisco / Cisco IOS XE Software。影響ありとして記載：3.5.0E。影響ありとして記載：3.5.1E。影響ありとして記載：3.5.2E。影響ありとして記載：3.5.3E。影響ありとして記載：3.6.0E。影響ありとして記載：3.6.1E。影響ありとして記載：3.6.2aE。影響ありとして記載：3.6.2E。影響ありとして記載：3.6.3E。影響ありとして記載：3.6.4E。影響ありとして記載：3.6.5E。影響ありとして記載：3.6.6E。影響ありとして記載：3.6.5aE。影響ありとして記載：3.6.7E。影響ありとして記載：3.6.8E。影響ありとして記載：3.6.7bE。影響ありとして記載：3.6.9E。影響ありとして記載：3.6.10E。影響ありとして記載：3.14.0S。影響ありとして記載：3.14.1S。影響ありとして記載：3.14.2S。影響ありとして記載：3.14.3S。影響ありとして記載：3.14.4S。影響ありとして記載：3.15.0S。影響ありとして記載：3.15.1S。影響ありとして記載：3.15.2S。影響ありとして記載：3.15.1cS。影響ありとして記載：3.15.3S。影響ありとして記載：3.15.4S。影響ありとして記載：3.7.0E。影響ありとして記載：3.7.1E。影響ありとして記載：3.7.2E。影響ありとして記載：3.7.3E。影響ありとして記載：3.7.4E。影響ありとして記載：3.7.5E。影響ありとして記載：3.5.0SQ。影響ありとして記載：3.5.1SQ。影響ありとして記載：3.5.2SQ。影響ありとして記載：3.5.3SQ。影響ありとして記載：3.5.4SQ。影響ありとして記載：3.5.5SQ。影響ありとして記載：3.5.6SQ。影響ありとして記載：3.5.7SQ。影響ありとして記載：3.5.8SQ。影響ありとして記載：3.16.0S。影響ありとして記載：3.16.1S。影響ありとして記載：3.16.1aS。影響ありとして記載：3.16.2S。影響ありとして記載：3.16.2aS。影響ありとして記載：3.16.0cS。影響ありとして記載：3.16.3S。影響ありとして記載：3.16.2bS。影響ありとして記載：3.16.3aS。影響ありとして記載：3.16.4S。影響ありとして記載：3.16.4aS。影響ありとして記載：3.16.4bS。影響ありとして記載：3.16.5S。影響ありとして記載：3.16.4dS。影響ありとして記載：3.16.6S。影響ありとして記載：3.16.7S。影響ありとして記載：3.16.6bS。影響ありとして記載：3.16.7aS。影響ありとして記載：3.16.7bS。影響ありとして記載：3.16.8S。影響ありとして記載：3.16.9S。影響ありとして記載：3.16.10S。影響ありとして記載：3.17.0S。影響ありとして記載：3.17.1S。影響ありとして記載：3.17.2S。影響ありとして記載：3.17.1aS。影響ありとして記載：3.17.3S。影響ありとして記載：3.17.4S。影響ありとして記載：3.8.0E。影響ありとして記載：3.8.1E。影響ありとして記載：3.8.2E。影響ありとして記載：3.8.3E。影響ありとして記載：3.8.4E。影響ありとして記載：3.8.5E。影響ありとして記載：3.8.5aE。影響ありとして記載：3.8.6E。影響ありとして記載：3.8.7E。影響ありとして記載：3.8.8E。影響ありとして記載：3.8.9E。影響ありとして記載：3.8.10E。影響ありとして記載：3.18.0aS。影響ありとして記載：3.18.0S。影響ありとして記載：3.18.1S。影響ありとして記載：3.18.2S。影響ありとして記載：3.18.3S。影響ありとして記載：3.18.4S。影響ありとして記載：3.18.0SP。影響ありとして記載：3.18.1SP。影響ありとして記載：3.18.1aSP。影響ありとして記載：3.18.1bSP。影響ありとして記載：3.18.1cSP。影響ありとして記載：3.18.2SP。影響ありとして記載：3.18.2aSP。影響ありとして記載：3.18.3SP。影響ありとして記載：3.18.4SP。影響ありとして記載：3.18.3aSP。影響ありとして記載：3.18.3bSP。影響ありとして記載：3.18.5SP。影響ありとして記載：3.18.6SP。影響ありとして記載：3.18.7SP。影響ありとして記載：3.18.8aSP。影響ありとして記載：3.18.9SP。影響ありとして記載：3.9.0E。影響ありとして記載：3.9.1E。影響ありとして記載：3.9.2E。影響ありとして記載：16.6.1。影響ありとして記載：16.6.2。影響ありとして記載：16.6.3。影響ありとして記載：16.6.4。影響ありとして記載：16.6.5。影響ありとして記載：16.6.4a。影響ありとして記載：16.6.5a。影響ありとして記載：16.6.6。影響ありとして記載：16.6.7。影響ありとして記載：16.6.8。影響ありとして記載：16.6.9。影響ありとして記載：16.6.10。影響ありとして記載：16.7.1。影響ありとして記載：16.7.1a。影響ありとして記載：16.7.1b。影響ありとして記載：16.7.2。影響ありとして記載：16.7.3。影響ありとして記載：16.7.4。影響ありとして記載：16.8.1。影響ありとして記載：16.8.1a。影響ありとして記載：16.8.1b。影響ありとして記載：16.8.1s。影響ありとして記載：16.8.1c。影響ありとして記載：16.8.1d。影響ありとして記載：16.8.2。影響ありとして記載：16.8.1e。影響ありとして記載：16.8.3。影響ありとして記載：16.9.1。影響ありとして記載：16.9.2。影響ありとして記載：16.9.1a。影響ありとして記載：16.9.1b。影響ありとして記載：16.9.1s。影響ありとして記載：16.9.3。影響ありとして記載：16.9.4。影響ありとして記載：16.9.3a。影響ありとして記載：16.9.5。影響ありとして記載：16.9.5f。影響ありとして記載：16.9.6。影響ありとして記載：16.9.7。影響ありとして記載：16.9.8。影響ありとして記載：16.10.1。影響ありとして記載：16.10.1a。影響ありとして記載：16.10.1b。影響ありとして記載：16.10.1s。影響ありとして記載：16.10.1c。影響ありとして記載：16.10.1e。影響ありとして記載：16.10.1d。影響ありとして記載：16.10.2。影響ありとして記載：16.10.1f。影響ありとして記載：16.10.1g。影響ありとして記載：16.10.3。影響ありとして記載：3.10.0E。影響ありとして記載：3.10.1E。影響ありとして記載：3.10.0cE。影響ありとして記載：3.10.2E。影響ありとして記載：3.10.3E。影響ありとして記載：16.11.1。影響ありとして記載：16.11.1a。影響ありとして記載：16.11.1b。影響ありとして記載：16.11.2。影響ありとして記載：16.11.1s。影響ありとして記載：16.12.1。影響ありとして記載：16.12.1s。影響ありとして記載：16.12.1a。影響ありとして記載：16.12.1c。影響ありとして記載：16.12.1w。影響ありとして記載：16.12.2。影響ありとして記載：16.12.1y。影響ありとして記載：16.12.2a。影響ありとして記載：16.12.3。影響ありとして記載：16.12.8。影響ありとして記載：16.12.2s。影響ありとして記載：16.12.1x。影響ありとして記載：16.12.1t。影響ありとして記載：16.12.4。影響ありとして記載：16.12.3s。影響ありとして記載：16.12.3a。影響ありとして記載：16.12.4a。影響ありとして記載：16.12.5。影響ありとして記載：16.12.6。影響ありとして記載：16.12.1z1。影響ありとして記載：16.12.5a。影響ありとして記載：16.12.5b。影響ありとして記載：16.12.1z2。影響ありとして記載：16.12.6a。影響ありとして記載：16.12.7。影響ありとして記載：16.12.9。影響ありとして記載：16.12.10。影響ありとして記載：16.12.10a。影響ありとして記載：16.12.11。影響ありとして記載：16.12.12。影響ありとして記載：16.12.13。影響ありとして記載：3.11.0E。影響ありとして記載：3.11.1E。影響ありとして記載：3.11.2E。影響ありとして記載：3.11.3E。影響ありとして記載：3.11.1aE。影響ありとして記載：3.11.4E。影響ありとして記載：3.11.3aE。影響ありとして記載：3.11.5E。影響ありとして記載：3.11.6E。影響ありとして記載：3.11.7E。影響ありとして記載：3.11.8E。影響ありとして記載：3.11.9E。影響ありとして記載：3.11.10E。影響ありとして記載：3.11.11E。影響ありとして記載：3.11.12E。影響ありとして記載：17.1.1。影響ありとして記載：17.1.1a。影響ありとして記載：17.1.1s。影響ありとして記載：17.1.1t。影響ありとして記載：17.1.3。影響ありとして記載：17.2.1。影響ありとして記載：17.2.1r。影響ありとして記載：17.2.1a。影響ありとして記載：17.2.1v。影響ありとして記載：17.2.2。影響ありとして記載：17.2.3。影響ありとして記載：17.3.1。影響ありとして記載：17.3.2。影響ありとして記載：17.3.3。影響ありとして記載：17.3.1a。影響ありとして記載：17.3.1w。影響ありとして記載：17.3.2a。影響ありとして記載：17.3.1x。影響ありとして記載：17.3.1z。影響ありとして記載：17.3.4。影響ありとして記載：17.3.5。影響ありとして記載：17.3.4a。影響ありとして記載：17.3.6。影響ありとして記載：17.3.4b。影響ありとして記載：17.3.4c。影響ありとして記載：17.3.5a。影響ありとして記載：17.3.5b。影響ありとして記載：17.3.7。影響ありとして記載：17.3.8。影響ありとして記載：17.3.8a。影響ありとして記載：17.4.1。影響ありとして記載：17.4.2。影響ありとして記載：17.4.1a。影響ありとして記載：17.4.1b。影響ありとして記載：17.4.2a。影響ありとして記載：17.5.1。影響ありとして記載：17.5.1a。影響ありとして記載：17.6.1。影響ありとして記載：17.6.2。影響ありとして記載：17.6.1w。影響ありとして記載：17.6.1a。影響ありとして記載：17.6.1x。影響ありとして記載：17.6.3。影響ありとして記載：17.6.1y。影響ありとして記載：17.6.1z。影響ありとして記載：17.6.3a。影響ありとして記載：17.6.4。影響ありとして記載：17.6.1z1。影響ありとして記載：17.6.5。影響ありとして記載：17.6.6。影響ありとして記載：17.6.6a。影響ありとして記載：17.6.5a。影響ありとして記載：17.6.7。影響ありとして記載：17.6.8。影響ありとして記載：17.6.8a。影響ありとして記載：17.7.1。影響ありとして記載：17.7.1a。影響ありとして記載：17.7.1b。影響ありとして記載：17.7.2。影響ありとして記載：17.10.1。影響ありとして記載：17.10.1a。影響ありとして記載：17.10.1b。影響ありとして記載：17.8.1。影響ありとして記載：17.8.1a。影響ありとして記載：17.9.1。影響ありとして記載：17.9.1w。影響ありとして記載：17.9.2。影響ありとして記載：17.9.1a。影響ありとして記載：17.9.1x。影響ありとして記載：17.9.1y。影響ありとして記載：17.9.3。影響ありとして記載：17.9.2a。影響ありとして記載：17.9.1x1。影響ありとして記載：17.9.3a。影響ありとして記載：17.9.4。影響ありとして記載：17.9.1y1。影響ありとして記載：17.9.5。影響ありとして記載：17.9.4a。影響ありとして記載：17.9.5a。影響ありとして記載：17.9.5b。影響ありとして記載：17.9.6。影響ありとして記載：17.9.6a。影響ありとして記載：17.9.7。影響ありとして記載：17.9.5e。\n・公式の対象表：Cisco / Cisco IOS XE Catalyst SD-WAN。影響ありとして記載：16.9.1。影響ありとして記載：16.9.2。影響ありとして記載：16.9.3。影響ありとして記載：16.9.4。影響ありとして記載：16.10.1。影響ありとして記載：16.10.2。影響ありとして記載：16.10.3。影響ありとして記載：16.10.3a。影響ありとして記載：16.10.3b。影響ありとして記載：16.10.4。影響ありとして記載：16.10.5。影響ありとして記載：16.10.6。影響ありとして記載：16.11.1a。影響ありとして記載：16.12.1b。影響ありとして記載：16.12.1d。影響ありとして記載：16.12.1e。影響ありとして記載：16.12.2r。影響ありとして記載：16.12.3。影響ありとして記載：16.12.4。影響ありとして記載：16.12.4a。影響ありとして記載：16.12.5。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-20352", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:40.388Z", "lastSuccess": "2026-10-24T04:41:40.388Z", "sourceCheckedAt": "2026-10-24T04:41:40.388Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" }, { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-32463", "aliases": [], "title": "Sudo：脆弱性情報", "summary": "Sudo 1.9.17p1 未満のバージョンでは、--chroot オプションと併せてユーザーが制御できるディレクトリに置かれた /etc/nsswitch.conf が使用されるため、ローカルユーザーが root 権限を取得できる可能性があります。", "risk": "ローカルユーザーが root 権限を取得できる。", "product": "Sudo", "category": "other", "component": "package", "severity": "critical", "cvss": 9.3, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "Sudo", "range": ">= 1.9.14 / < 1.9.17p1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32463", "label": "CVE公式レコード" }, { "url": "https://www.sudo.ws/security/advisories/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sudo.ws/releases/changelog/", "label": "CVE掲載の参考情報" }, { "url": "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "label": "CVE掲載の参考情報" }, { "url": "https://www.openwall.com/lists/oss-security/2025/06/30/3", "label": "CVE掲載の参考情報" }, { "url": "https://access.redhat.com/security/cve/cve-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-7604-1", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "label": "CVE掲載の参考情報" }, { "url": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sudo.ws/security/advisories/chroot_bug/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32463", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-30T00:00:00.000Z", "modifiedAt": "2026-02-26T17:50:20.931Z", "fetchedAt": "2026-10-24T07:15:54.141Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Sudo", "vendor": "Sudo project", "versions": [ { "lessThan": "1.9.17p1", "status": "affected", "version": "1.9.14", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-32463", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "fetchedAt": "2026-10-24T07:15:54.141Z", "publishedAt": "2025-06-30T00:00:00.000Z", "modifiedAt": "2026-02-26T17:50:20.931Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Sudo project", "product": "Sudo", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "1.9.14", "lessThan": "1.9.17p1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-829", "lang": "en", "description": "CWE-829 Inclusion of Functionality from Untrusted Control Sphere", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.3, "baseSeverity": "CRITICAL", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.sudo.ws/security/advisories/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.sudo.ws/releases/changelog/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.openwall.com/lists/oss-security/2025/06/30/3", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/3" }, { "url": "https://access.redhat.com/security/cve/cve-2025-32463", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/4" }, { "url": "https://ubuntu.com/security/notices/USN-7604-1", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/5" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2025-32463", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/6" }, { "url": "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/7" }, { "url": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/8" }, { "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/9" }, { "url": "https://www.suse.com/security/cve/CVE-2025-32463.html", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/10" }, { "url": "https://www.secpod.com/blog/sudo-lpe-vulnerabilities-resolved-what-you-need-to-know-about-cve-2025-32462-and-cve-2025-32463/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/11" }, { "url": "https://www.sudo.ws/security/advisories/chroot_bug/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/12" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-32463-detect-sudo-vulnerability", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/13" }, { "url": "https://www.vicarius.io/vsociety/posts/cve-2025-32463-mitigate-sudo-vulnerability", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/14" }, { "url": "https://iototsecnews.jp/2025/07/01/linux-sudo-chroot-vulnerability-enables-hackers-to-elevate-privileges-to-root/", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-32463", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Sudo\",\"vendor\":\"Sudo project\",\"versions\":[{\"lessThan\":\"1.9.17p1\",\"status\":\"affected\",\"version\":\"1.9.14\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-829\",\"description\":\"CWE-829 Inclusion of Functionality from Untrusted Control Sphere\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-32463:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "sourcePath": "retained:/originalText", "text": "Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-32463:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:50:20.931Z", "fetchedAt": "2026-10-24T07:15:54.141Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Sudoに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T07:15:54.141Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "1e7eba02bd0a339084f946c2864f4845611efecdce3dbb4c9d620fde6ff21b0a", "sourceModifiedAt": "2026-02-26T17:50:20.931Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Sudo 1.9.17p1 未満のバージョンでは、--chroot オプションと併せてユーザーが制御できるディレクトリに置かれた /etc/nsswitch.conf が使用されるため、ローカルユーザーが root 権限を取得できる可能性があります。", "risk": "ローカルユーザーが root 権限を取得できる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "攻撃者はローカルユーザーであること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E1" ] }, { "text": "sudo の -R（--chroot）オプションを使用できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "/etc/nsswitch.conf が攻撃者が制御できるディレクトリに配置されていること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象の sudo バージョンが 1.9.17p1 未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Sudo project / Sudo。影響ありとして記載：1.9.14以上、1.9.17p1未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Sudo」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32463", "https://www.sudo.ws/security/advisories/", "https://www.sudo.ws/releases/changelog/", "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "https://www.openwall.com/lists/oss-security/2025/06/30/3", "https://access.redhat.com/security/cve/cve-2025-32463", "https://ubuntu.com/security/notices/USN-7604-1", "https://security-tracker.debian.org/tracker/CVE-2025-32463", "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "https://www.sudo.ws/security/advisories/chroot_bug/", "https://nvd.nist.gov/vuln/detail/CVE-2025-32463" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-32463", "https://www.sudo.ws/security/advisories/", "https://www.sudo.ws/releases/changelog/", "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "https://www.openwall.com/lists/oss-security/2025/06/30/3", "https://access.redhat.com/security/cve/cve-2025-32463", "https://ubuntu.com/security/notices/USN-7604-1", "https://security-tracker.debian.org/tracker/CVE-2025-32463", "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "https://www.sudo.ws/security/advisories/chroot_bug/", "https://nvd.nist.gov/vuln/detail/CVE-2025-32463" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-32463", "https://www.sudo.ws/security/advisories/", "https://www.sudo.ws/releases/changelog/", "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "https://www.openwall.com/lists/oss-security/2025/06/30/3", "https://access.redhat.com/security/cve/cve-2025-32463", "https://ubuntu.com/security/notices/USN-7604-1", "https://security-tracker.debian.org/tracker/CVE-2025-32463", "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "https://www.sudo.ws/security/advisories/chroot_bug/", "https://nvd.nist.gov/vuln/detail/CVE-2025-32463" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-32463", "label": "CVE公式レコード" }, { "url": "https://www.sudo.ws/security/advisories/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sudo.ws/releases/changelog/", "label": "CVE掲載の参考情報" }, { "url": "https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot", "label": "CVE掲載の参考情報" }, { "url": "https://www.openwall.com/lists/oss-security/2025/06/30/3", "label": "CVE掲載の参考情報" }, { "url": "https://access.redhat.com/security/cve/cve-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://ubuntu.com/security/notices/USN-7604-1", "label": "CVE掲載の参考情報" }, { "url": "https://security-tracker.debian.org/tracker/CVE-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://explore.alas.aws.amazon.com/CVE-2025-32463.html", "label": "CVE掲載の参考情報" }, { "url": "https://bugs.gentoo.org/show_bug.cgi?id=CVE-2025-32463", "label": "CVE掲載の参考情報" }, { "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502177-1/", "label": "CVE掲載の参考情報" }, { "url": "https://www.sudo.ws/security/advisories/chroot_bug/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-32463", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "sourceField": "retained:/originalText", "excerpt": "Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/32xxx/CVE-2025-32463.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Sudo\",\"vendor\":\"Sudo project\",\"versions\":[{\"lessThan\":\"1.9.17p1\",\"status\":\"affected\",\"version\":\"1.9.14\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-32463", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-32463\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-32463（Sudo）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者はローカルユーザーであること。\n・sudo の -R（--chroot）オプションを使用できること。\n・/etc/nsswitch.conf が攻撃者が制御できるディレクトリに配置されていること。\n・対象の sudo バージョンが 1.9.17p1 未満であること。\n・公式の対象表：Sudo project / Sudo。影響ありとして記載：1.9.14以上、1.9.17p1未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-32463", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T07:15:54.141Z", "lastSuccess": "2026-10-24T07:15:54.141Z", "sourceCheckedAt": "2026-10-24T07:15:54.141Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-59689", "aliases": [], "title": "Email Security Gateway：脆弱性情報", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。Libraesva Email Security Gateway（ESG）4.5 から 5.5.x（5.5.7 未満）のバージョンでは、圧縮されたメール添付ファイルを通じてコマンドインジェクションが可能です。", "risk": "攻撃者がサーバー上で任意のコマンドを実行できる可能性があります。", "product": "Email Security Gateway", "category": "other", "component": "package", "severity": "medium", "cvss": 6.1, "cvssVersion": "3.1", "cvssSource": "mitre", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "affected": [ { "product": "Email Security Gateway", "range": ">= 4.5 / < 5.0.31" }, { "product": "Email Security Gateway", "range": ">= 5.1 / < 5.1.20" }, { "product": "Email Security Gateway", "range": ">= 5.2 / < 5.2.31" }, { "product": "Email Security Gateway", "range": ">= 5.3 / < 5.4.8" }, { "product": "Email Security Gateway", "range": ">= 5.5 / < 5.5.7" } ], "fixed": [], "steps": [ "対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-59689", "label": "CVE公式レコード" }, { "url": "https://www.libraesva.com/security-blog/", "label": "CVE掲載の参考情報" }, { "url": "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59689", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-19T00:00:00.000Z", "modifiedAt": "2026-02-26T17:48:25.122Z", "fetchedAt": "2026-10-24T04:41:41.716Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Email Security Gateway", "vendor": "Libraesva", "versions": [ { "lessThan": "5.0.31", "status": "affected", "version": "4.5", "versionType": "custom" }, { "lessThan": "5.1.20", "status": "affected", "version": "5.1", "versionType": "custom" }, { "lessThan": "5.2.31", "status": "affected", "version": "5.2", "versionType": "custom" }, { "lessThan": "5.4.8", "status": "affected", "version": "5.3", "versionType": "custom" }, { "lessThan": "5.5.7", "status": "affected", "version": "5.5", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-59689", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "fetchedAt": "2026-10-24T04:41:41.716Z", "publishedAt": "2025-09-19T00:00:00.000Z", "modifiedAt": "2026-02-26T17:48:25.122Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Libraesva", "product": "Email Security Gateway", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "4.5", "lessThan": "5.0.31", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "5.1", "lessThan": "5.1.20", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "5.2", "lessThan": "5.2.31", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "5.3", "lessThan": "5.4.8", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "5.5", "lessThan": "5.5.7", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-77", "lang": "en", "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "baseScore": 6.1, "baseSeverity": "MEDIUM", "provider": "mitre", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.libraesva.com/security-blog/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/0" }, { "url": "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "label": "mitre", "tags": [], "provider": "mitre", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59689", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Email Security Gateway\",\"vendor\":\"Libraesva\",\"versions\":[{\"lessThan\":\"5.0.31\",\"status\":\"affected\",\"version\":\"4.5\",\"versionType\":\"custom\"},{\"lessThan\":\"5.1.20\",\"status\":\"affected\",\"version\":\"5.1\",\"versionType\":\"custom\"},{\"lessThan\":\"5.2.31\",\"status\":\"affected\",\"version\":\"5.2\",\"versionType\":\"custom\"},{\"lessThan\":\"5.4.8\",\"status\":\"affected\",\"version\":\"5.3\",\"versionType\":\"custom\"},{\"lessThan\":\"5.5.7\",\"status\":\"affected\",\"version\":\"5.5\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-77\",\"description\":\"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-59689:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "sourcePath": "retained:/originalText", "text": "Libraesva Email Security Gateway (ESG) contains a command injection vulnerability which allows command injection via a compressed e-mail attachment.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-59689:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:48:25.122Z", "fetchedAt": "2026-10-24T04:41:41.716Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Email Security Gatewayに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:41.716Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "2faa5552fa1bd63a54027f2f1052c39289979cd66c18ad175d8be53efed1e8f8", "sourceModifiedAt": "2026-02-26T17:48:25.122Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "対象版の公式記載に相違があるため、以下の説明だけで対象外・修正済みと判断しないでください。Libraesva Email Security Gateway（ESG）4.5 から 5.5.x（5.5.7 未満）のバージョンでは、圧縮されたメール添付ファイルを通じてコマンドインジェクションが可能です。", "risk": "攻撃者がサーバー上で任意のコマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "圧縮されたメール添付ファイルを送信できる攻撃者が存在することが前提です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Libraesva / Email Security Gateway。影響ありとして記載：4.5以上、5.0.31未満。影響ありとして記載：5.1以上、5.1.20未満。影響ありとして記載：5.2以上、5.2.31未満。影響ありとして記載：5.3以上、5.4.8未満。影響ありとして記載：5.5以上、5.5.7未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Email Security Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-59689", "https://www.libraesva.com/security-blog/", "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "https://nvd.nist.gov/vuln/detail/CVE-2025-59689" ] } ], "actions": [ { "text": "対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-59689", "https://www.libraesva.com/security-blog/", "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "https://nvd.nist.gov/vuln/detail/CVE-2025-59689" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-59689", "https://www.libraesva.com/security-blog/", "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "https://nvd.nist.gov/vuln/detail/CVE-2025-59689" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-59689", "label": "CVE公式レコード" }, { "url": "https://www.libraesva.com/security-blog/", "label": "CVE掲載の参考情報" }, { "url": "https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59689", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Libraesva ESG 4.5 through 5.5.x before 5.5.7 allows command injection via a compressed e-mail attachment. For ESG 5.0 a fix has been released in 5.0.31. For ESG 5.1 a fix has been released in 5.1.20. For ESG 5.2 a fix has been released in 5.2.31. For ESG 5.4 a fix has been released in 5.4.8. For ESG 5.5. a fix has been released in 5.5.7.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/59xxx/CVE-2025-59689.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Email Security Gateway\",\"vendor\":\"Libraesva\",\"versions\":[{\"lessThan\":\"5.0.31\",\"status\":\"affected\",\"version\":\"4.5\",\"versionType\":\"custom\"},{\"lessThan\":\"5.1.20\",\"status\":\"affected\",\"version\":\"5.1\",\"versionType\":\"custom\"},{\"lessThan\":\"5.2.31\",\"status\":\"affected\",\"version\":\"5.2\",\"versionType\":\"custom\"},{\"lessThan\":\"5.4.8\",\"status\":\"affected\",\"version\":\"5.3\",\"versionType\":\"custom\"},{\"lessThan\":\"5.5.7\",\"status\":\"affected\",\"version\":\"5.5\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-59689", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-59689\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-59689（Email Security Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・圧縮されたメール添付ファイルを送信できる攻撃者が存在することが前提です。\n・公式の対象表：Libraesva / Email Security Gateway。影響ありとして記載：4.5以上、5.0.31未満。影響ありとして記載：5.1以上、5.1.20未満。影響ありとして記載：5.2以上、5.2.31未満。影響ありとして記載：5.3以上、5.4.8未満。影響ありとして記載：5.5以上、5.5.7未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-59689\n\n公式資料で追加確認が必要な点：\n・対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [ { "code": "affected_range_conflict", "text": "対象版の公式記載に相違があります。Email Security Gatewayについて、説明文は「4.5から5.5」、対象表は「4.5以上、5.0.31未満」です。説明文と対象表のどちらか一方だけで対象外や修正済みと判断せず、利用中の版を添えて提供元に確認してください。", "evidenceIds": [ "E1", "E2" ] } ], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:41.716Z", "lastSuccess": "2026-10-24T04:41:41.716Z", "sourceCheckedAt": "2026-10-24T04:41:41.716Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-20333", "aliases": [], "title": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software：コード実行", "summary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Secure Firewall Threat Defense (FTD) ソフトウェアの VPN Web サーバーにおいて、ユーザーが提供した入力を HTTP(S) リクエストで適切に検証しないため、認証されたリモート攻撃者が細工した HTTP リクエストを送信すると、任意のコードを root 権限で実行できる可能性があります。", "risk": "攻撃が成功すると、攻撃者はデバイス上で root 権限のコードを実行でき、デバイス全体が完全に乗っ取られる恐れがあります。", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software", "category": "other", "component": "package", "severity": "critical", "cvss": 9.9, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.45" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.62" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.65" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.57" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.61" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.62" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.70" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.71" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.76" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.82" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.84" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.31" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.21" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.12" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.13" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.14" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.15" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.16" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.17" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.18" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.12" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.13" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.14" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.15" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.16" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.17" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.18" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20333", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "label": "cisco-sa-asaftd-webvpn-z5xP8EUB" }, { "url": "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-25T16:12:14.308Z", "modifiedAt": "2026-02-26T17:47:58.577Z", "fetchedAt": "2026-10-24T04:41:48.185Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.2.45", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.12.4.62", "status": "affected" }, { "version": "9.12.4.65", "status": "affected" }, { "version": "9.12.4.67", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.14.4.24", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.16.4.57", "status": "affected" }, { "version": "9.16.4.61", "status": "affected" }, { "version": "9.16.4.62", "status": "affected" }, { "version": "9.16.4.67", "status": "affected" }, { "version": "9.16.4.70", "status": "affected" }, { "version": "9.16.4.71", "status": "affected" }, { "version": "9.16.4.76", "status": "affected" }, { "version": "9.16.4.82", "status": "affected" }, { "version": "9.16.4.84", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.17.1.33", "status": "affected" }, { "version": "9.17.1.39", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.18.4.22", "status": "affected" }, { "version": "9.18.4.24", "status": "affected" }, { "version": "9.18.4.29", "status": "affected" }, { "version": "9.18.4.34", "status": "affected" }, { "version": "9.18.4.40", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.19.1.28", "status": "affected" }, { "version": "9.19.1.31", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.20.2", "status": "affected" }, { "version": "9.20.2.10", "status": "affected" }, { "version": "9.20.2.21", "status": "affected" }, { "version": "9.20.2.22", "status": "affected" }, { "version": "9.20.3", "status": "affected" }, { "version": "9.20.3.4", "status": "affected" }, { "version": "9.22.1.1", "status": "affected" }, { "version": "9.22.1.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.6.7.2", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.4.0.17", "status": "affected" }, { "version": "6.4.0.18", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.0.6.2", "status": "affected" }, { "version": "7.0.6.3", "status": "affected" }, { "version": "7.0.7", "status": "affected" }, { "version": "7.0.8", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.2.6", "status": "affected" }, { "version": "7.2.7", "status": "affected" }, { "version": "7.2.5.2", "status": "affected" }, { "version": "7.2.8", "status": "affected" }, { "version": "7.2.8.1", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.3.1.2", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.4.1", "status": "affected" }, { "version": "7.4.1.1", "status": "affected" }, { "version": "7.4.2", "status": "affected" }, { "version": "7.4.2.1", "status": "affected" }, { "version": "7.4.2.2", "status": "affected" }, { "version": "7.4.2.3", "status": "affected" }, { "version": "7.6.0", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-20333", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "fetchedAt": "2026-10-24T04:41:48.185Z", "publishedAt": "2025-09-25T16:12:14.308Z", "modifiedAt": "2026-02-26T17:47:58.577Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.2.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.12.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.12.4.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.12.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.14.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.16.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.16.4.61", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.16.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.16.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.16.4.70", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.16.4.71", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.16.4.76", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.16.4.82", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.16.4.84", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.17.1.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.17.1.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "9.18.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "9.18.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "9.18.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "9.18.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "9.18.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "9.19.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "9.19.1.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "9.20.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "9.20.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "9.20.2.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "9.20.2.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "9.20.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "9.20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "9.22.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "9.22.1.2", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.6.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.4.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.4.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.0.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.0.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "7.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "7.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "7.2.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/80", "version": "7.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/81", "version": "7.2.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/82", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/83", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/84", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/85", "version": "7.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/86", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/87", "version": "7.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/88", "version": "7.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/89", "version": "7.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/90", "version": "7.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/91", "version": "7.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/92", "version": "7.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/93", "version": "7.6.0", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-120", "lang": "en", "description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.9, "baseSeverity": "CRITICAL", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "label": "cisco-sa-asaftd-webvpn-z5xP8EUB", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco Product Security Incident Response Team (PSIRT) is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\",\"type\":\"cwe\",\"cweId\":\"CWE-120\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":9.9,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-20333:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "sourcePath": "retained:/originalText", "text": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-20333:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "sourcePath": "retained:/sourceAction", "text": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "modifiedAt": "2025-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:47:58.577Z", "fetchedAt": "2026-10-24T04:41:48.185Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Softwareにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:48.185Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "a6a20c032f4ba4ca0536676fcc495f933ffd42d49b90f60029b84175526eeb9f", "sourceModifiedAt": "2026-02-26T17:47:58.577Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアおよび Cisco Secure Firewall Threat Defense (FTD) ソフトウェアの VPN Web サーバーにおいて、ユーザーが提供した入力を HTTP(S) リクエストで適切に検証しないため、認証されたリモート攻撃者が細工した HTTP リクエストを送信すると、任意のコードを root 権限で実行できる可能性があります。", "risk": "攻撃が成功すると、攻撃者はデバイス上で root 権限のコードを実行でき、デバイス全体が完全に乗っ取られる恐れがあります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "有効な VPN ユーザー認証情報を持つリモート攻撃者が、VPN Web サーバーに対して細工した HTTP リクエストを送信できることが前提条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.16.4.62。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.16.4.71。影響ありとして記載：9.16.4.76。影響ありとして記載：9.16.4.82。影響ありとして記載：9.16.4.84。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.18.4.29。影響ありとして記載：9.18.4.34。影響ありとして記載：9.18.4.40。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。影響ありとして記載：9.20.2.22。影響ありとして記載：9.20.3。影響ありとして記載：9.20.3.4。影響ありとして記載：9.22.1.1。影響ありとして記載：9.22.1.2。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.0.6.3。影響ありとして記載：7.0.7。影響ありとして記載：7.0.8。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。影響ありとして記載：7.4.2。影響ありとして記載：7.4.2.1。影響ありとして記載：7.4.2.2。影響ありとして記載：7.4.2.3。影響ありとして記載：7.6.0。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20333", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-20333", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20333", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20333", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB", "label": "cisco-sa-asaftd-webvpn-z5xP8EUB" }, { "url": "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20333.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20333", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-20333\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-20333（Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・有効な VPN ユーザー認証情報を持つリモート攻撃者が、VPN Web サーバーに対して細工した HTTP リクエストを送信できることが前提条件です。\n・公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.16.4.62。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.16.4.71。影響ありとして記載：9.16.4.76。影響ありとして記載：9.16.4.82。影響ありとして記載：9.16.4.84。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.18.4.29。影響ありとして記載：9.18.4.34。影響ありとして記載：9.18.4.40。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。影響ありとして記載：9.20.2.22。影響ありとして記載：9.20.3。影響ありとして記載：9.20.3.4。影響ありとして記載：9.22.1.1。影響ありとして記載：9.22.1.2。\n・公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.0.6.3。影響ありとして記載：7.0.7。影響ありとして記載：7.0.8。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。影響ありとして記載：7.4.2。影響ありとして記載：7.4.2.1。影響ありとして記載：7.4.2.2。影響ありとして記載：7.4.2.3。影響ありとして記載：7.6.0。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-20333", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:48.185Z", "lastSuccess": "2026-10-24T04:41:48.185Z", "sourceCheckedAt": "2026-10-24T04:41:48.185Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-20362", "aliases": [], "title": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software：サービス停止", "summary": "Cisco Secure ASA ソフトウェアまたは Cisco Secure FTD ソフトウェアの VPN Web サーバーにおいて、ユーザー入力の検証が不十分なため、認証されていないリモート攻撃者がリモートアクセス VPN に関係する制限された URL エンドポイントへアクセスできる可能性があります。", "risk": "この脆弱性が悪用されると、未パッチのデバイスが予期せずリロードし、サービスが利用できなくなる（DoS）状態になる可能性があります。", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software", "category": "other", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "cisco", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "affected": [ { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.16" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.21" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.3.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.2.45" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.25" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.32" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.41" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.43" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.44" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.45" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.8.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.2.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.26" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.35" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.37" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.41" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.47" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.50" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.52" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.54" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.56" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.58" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.62" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.65" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.12.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.1.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.2.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.3.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.17" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.23" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.14.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.2.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.3.23" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.14" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.19" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.42" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.48" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.57" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.61" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.62" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.67" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.70" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.71" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.76" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.82" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.16.4.84" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.11" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.15" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.30" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.33" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.45" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.17.1.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.2.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.39" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.46" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.53" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.55" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.3.56" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.8" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.29" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.34" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.40" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.47" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.50" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.52" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.53" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.57" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.18.4.66" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.12" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.18" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.24" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.27" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.28" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.31" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.37" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.38" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.19.1.42" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.1.5" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.21" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.2.22" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.10" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.16" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.3.20" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.20.4.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.1.6" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.4" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.9" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.22.2.13" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.3" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.7" }, { "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "range": "9.23.1.13" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.12" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.13" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.14" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.15" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.16" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.17" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.2.3.18" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.5.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.6.7.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.11" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.12" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.13" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.14" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.15" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.16" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.17" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "6.4.0.18" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.6.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.0.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.1.0.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.0.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.6" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.7" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.5.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.8.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.9" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.2.10" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.3.1.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.1.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.4.2.3" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.1" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.6.2" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.0" }, { "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "range": "7.7.10" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20362", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "label": "cisco-sa-asaftd-webvpn-YROOTUW" }, { "url": "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-25T16:12:35.916Z", "modifiedAt": "2026-02-26T17:47:57.719Z", "fetchedAt": "2026-10-24T04:41:49.394Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software [\"#fs\"] section of this advisory.\r\n\r A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [ { "version": "9.8.1", "status": "affected" }, { "version": "9.8.1.5", "status": "affected" }, { "version": "9.8.1.7", "status": "affected" }, { "version": "9.8.2", "status": "affected" }, { "version": "9.8.2.8", "status": "affected" }, { "version": "9.8.2.14", "status": "affected" }, { "version": "9.8.2.15", "status": "affected" }, { "version": "9.8.2.17", "status": "affected" }, { "version": "9.8.2.20", "status": "affected" }, { "version": "9.8.2.24", "status": "affected" }, { "version": "9.8.2.26", "status": "affected" }, { "version": "9.8.2.28", "status": "affected" }, { "version": "9.8.2.33", "status": "affected" }, { "version": "9.8.2.35", "status": "affected" }, { "version": "9.8.2.38", "status": "affected" }, { "version": "9.8.3.8", "status": "affected" }, { "version": "9.8.3.11", "status": "affected" }, { "version": "9.8.3.14", "status": "affected" }, { "version": "9.8.3.16", "status": "affected" }, { "version": "9.8.3.18", "status": "affected" }, { "version": "9.8.3.21", "status": "affected" }, { "version": "9.8.3", "status": "affected" }, { "version": "9.8.3.26", "status": "affected" }, { "version": "9.8.3.29", "status": "affected" }, { "version": "9.8.4", "status": "affected" }, { "version": "9.8.4.3", "status": "affected" }, { "version": "9.8.4.7", "status": "affected" }, { "version": "9.8.4.8", "status": "affected" }, { "version": "9.8.4.10", "status": "affected" }, { "version": "9.8.4.12", "status": "affected" }, { "version": "9.8.4.15", "status": "affected" }, { "version": "9.8.4.17", "status": "affected" }, { "version": "9.8.2.45", "status": "affected" }, { "version": "9.8.4.25", "status": "affected" }, { "version": "9.8.4.20", "status": "affected" }, { "version": "9.8.4.22", "status": "affected" }, { "version": "9.8.4.26", "status": "affected" }, { "version": "9.8.4.29", "status": "affected" }, { "version": "9.8.4.32", "status": "affected" }, { "version": "9.8.4.33", "status": "affected" }, { "version": "9.8.4.34", "status": "affected" }, { "version": "9.8.4.35", "status": "affected" }, { "version": "9.8.4.39", "status": "affected" }, { "version": "9.8.4.40", "status": "affected" }, { "version": "9.8.4.41", "status": "affected" }, { "version": "9.8.4.43", "status": "affected" }, { "version": "9.8.4.44", "status": "affected" }, { "version": "9.8.4.45", "status": "affected" }, { "version": "9.8.4.46", "status": "affected" }, { "version": "9.8.4.48", "status": "affected" }, { "version": "9.12.1", "status": "affected" }, { "version": "9.12.1.2", "status": "affected" }, { "version": "9.12.1.3", "status": "affected" }, { "version": "9.12.2", "status": "affected" }, { "version": "9.12.2.4", "status": "affected" }, { "version": "9.12.2.5", "status": "affected" }, { "version": "9.12.2.9", "status": "affected" }, { "version": "9.12.3", "status": "affected" }, { "version": "9.12.3.2", "status": "affected" }, { "version": "9.12.3.7", "status": "affected" }, { "version": "9.12.4", "status": "affected" }, { "version": "9.12.3.12", "status": "affected" }, { "version": "9.12.3.9", "status": "affected" }, { "version": "9.12.2.1", "status": "affected" }, { "version": "9.12.4.2", "status": "affected" }, { "version": "9.12.4.4", "status": "affected" }, { "version": "9.12.4.7", "status": "affected" }, { "version": "9.12.4.10", "status": "affected" }, { "version": "9.12.4.13", "status": "affected" }, { "version": "9.12.4.8", "status": "affected" }, { "version": "9.12.4.18", "status": "affected" }, { "version": "9.12.4.24", "status": "affected" }, { "version": "9.12.4.26", "status": "affected" }, { "version": "9.12.4.29", "status": "affected" }, { "version": "9.12.4.30", "status": "affected" }, { "version": "9.12.4.35", "status": "affected" }, { "version": "9.12.4.37", "status": "affected" }, { "version": "9.12.4.38", "status": "affected" }, { "version": "9.12.4.39", "status": "affected" }, { "version": "9.12.4.40", "status": "affected" }, { "version": "9.12.4.41", "status": "affected" }, { "version": "9.12.4.47", "status": "affected" }, { "version": "9.12.4.48", "status": "affected" }, { "version": "9.12.4.50", "status": "affected" }, { "version": "9.12.4.52", "status": "affected" }, { "version": "9.12.4.54", "status": "affected" }, { "version": "9.12.4.55", "status": "affected" }, { "version": "9.12.4.56", "status": "affected" }, { "version": "9.12.4.58", "status": "affected" }, { "version": "9.12.4.62", "status": "affected" }, { "version": "9.12.4.65", "status": "affected" }, { "version": "9.12.4.67", "status": "affected" }, { "version": "9.14.1", "status": "affected" }, { "version": "9.14.1.10", "status": "affected" }, { "version": "9.14.1.6", "status": "affected" }, { "version": "9.14.1.15", "status": "affected" }, { "version": "9.14.1.19", "status": "affected" }, { "version": "9.14.1.30", "status": "affected" }, { "version": "9.14.2", "status": "affected" }, { "version": "9.14.2.4", "status": "affected" }, { "version": "9.14.2.8", "status": "affected" }, { "version": "9.14.2.13", "status": "affected" }, { "version": "9.14.2.15", "status": "affected" }, { "version": "9.14.3", "status": "affected" }, { "version": "9.14.3.1", "status": "affected" }, { "version": "9.14.3.9", "status": "affected" }, { "version": "9.14.3.11", "status": "affected" }, { "version": "9.14.3.13", "status": "affected" }, { "version": "9.14.3.18", "status": "affected" }, { "version": "9.14.3.15", "status": "affected" }, { "version": "9.14.4", "status": "affected" }, { "version": "9.14.4.6", "status": "affected" }, { "version": "9.14.4.7", "status": "affected" }, { "version": "9.14.4.12", "status": "affected" }, { "version": "9.14.4.13", "status": "affected" }, { "version": "9.14.4.14", "status": "affected" }, { "version": "9.14.4.15", "status": "affected" }, { "version": "9.14.4.17", "status": "affected" }, { "version": "9.14.4.22", "status": "affected" }, { "version": "9.14.4.23", "status": "affected" }, { "version": "9.14.4.24", "status": "affected" }, { "version": "9.16.1", "status": "affected" }, { "version": "9.16.1.28", "status": "affected" }, { "version": "9.16.2", "status": "affected" }, { "version": "9.16.2.3", "status": "affected" }, { "version": "9.16.2.7", "status": "affected" }, { "version": "9.16.2.11", "status": "affected" }, { "version": "9.16.2.13", "status": "affected" }, { "version": "9.16.2.14", "status": "affected" }, { "version": "9.16.3", "status": "affected" }, { "version": "9.16.3.3", "status": "affected" }, { "version": "9.16.3.14", "status": "affected" }, { "version": "9.16.3.15", "status": "affected" }, { "version": "9.16.3.19", "status": "affected" }, { "version": "9.16.3.23", "status": "affected" }, { "version": "9.16.4", "status": "affected" }, { "version": "9.16.4.9", "status": "affected" }, { "version": "9.16.4.14", "status": "affected" }, { "version": "9.16.4.18", "status": "affected" }, { "version": "9.16.4.19", "status": "affected" }, { "version": "9.16.4.27", "status": "affected" }, { "version": "9.16.4.38", "status": "affected" }, { "version": "9.16.4.39", "status": "affected" }, { "version": "9.16.4.42", "status": "affected" }, { "version": "9.16.4.48", "status": "affected" }, { "version": "9.16.4.55", "status": "affected" }, { "version": "9.16.4.57", "status": "affected" }, { "version": "9.16.4.61", "status": "affected" }, { "version": "9.16.4.62", "status": "affected" }, { "version": "9.16.4.67", "status": "affected" }, { "version": "9.16.4.70", "status": "affected" }, { "version": "9.16.4.71", "status": "affected" }, { "version": "9.16.4.76", "status": "affected" }, { "version": "9.16.4.82", "status": "affected" }, { "version": "9.16.4.84", "status": "affected" }, { "version": "9.17.1", "status": "affected" }, { "version": "9.17.1.7", "status": "affected" }, { "version": "9.17.1.9", "status": "affected" }, { "version": "9.17.1.10", "status": "affected" }, { "version": "9.17.1.11", "status": "affected" }, { "version": "9.17.1.13", "status": "affected" }, { "version": "9.17.1.15", "status": "affected" }, { "version": "9.17.1.20", "status": "affected" }, { "version": "9.17.1.30", "status": "affected" }, { "version": "9.17.1.33", "status": "affected" }, { "version": "9.17.1.39", "status": "affected" }, { "version": "9.17.1.45", "status": "affected" }, { "version": "9.17.1.46", "status": "affected" }, { "version": "9.18.1", "status": "affected" }, { "version": "9.18.1.3", "status": "affected" }, { "version": "9.18.2", "status": "affected" }, { "version": "9.18.2.5", "status": "affected" }, { "version": "9.18.2.7", "status": "affected" }, { "version": "9.18.2.8", "status": "affected" }, { "version": "9.18.3", "status": "affected" }, { "version": "9.18.3.39", "status": "affected" }, { "version": "9.18.3.46", "status": "affected" }, { "version": "9.18.3.53", "status": "affected" }, { "version": "9.18.3.55", "status": "affected" }, { "version": "9.18.3.56", "status": "affected" }, { "version": "9.18.4", "status": "affected" }, { "version": "9.18.4.5", "status": "affected" }, { "version": "9.18.4.8", "status": "affected" }, { "version": "9.18.4.22", "status": "affected" }, { "version": "9.18.4.24", "status": "affected" }, { "version": "9.18.4.29", "status": "affected" }, { "version": "9.18.4.34", "status": "affected" }, { "version": "9.18.4.40", "status": "affected" }, { "version": "9.18.4.47", "status": "affected" }, { "version": "9.18.4.50", "status": "affected" }, { "version": "9.18.4.52", "status": "affected" }, { "version": "9.18.4.53", "status": "affected" }, { "version": "9.18.4.57", "status": "affected" }, { "version": "9.18.4.66", "status": "affected" }, { "version": "9.19.1", "status": "affected" }, { "version": "9.19.1.5", "status": "affected" }, { "version": "9.19.1.9", "status": "affected" }, { "version": "9.19.1.12", "status": "affected" }, { "version": "9.19.1.18", "status": "affected" }, { "version": "9.19.1.22", "status": "affected" }, { "version": "9.19.1.24", "status": "affected" }, { "version": "9.19.1.27", "status": "affected" }, { "version": "9.19.1.28", "status": "affected" }, { "version": "9.19.1.31", "status": "affected" }, { "version": "9.19.1.37", "status": "affected" }, { "version": "9.19.1.38", "status": "affected" }, { "version": "9.19.1.42", "status": "affected" }, { "version": "9.20.1", "status": "affected" }, { "version": "9.20.1.5", "status": "affected" }, { "version": "9.20.2", "status": "affected" }, { "version": "9.20.2.10", "status": "affected" }, { "version": "9.20.2.21", "status": "affected" }, { "version": "9.20.2.22", "status": "affected" }, { "version": "9.20.3", "status": "affected" }, { "version": "9.20.3.4", "status": "affected" }, { "version": "9.20.3.7", "status": "affected" }, { "version": "9.20.3.9", "status": "affected" }, { "version": "9.20.3.10", "status": "affected" }, { "version": "9.20.3.13", "status": "affected" }, { "version": "9.20.3.16", "status": "affected" }, { "version": "9.20.3.20", "status": "affected" }, { "version": "9.20.4", "status": "affected" }, { "version": "9.20.4.7", "status": "affected" }, { "version": "9.22.1.1", "status": "affected" }, { "version": "9.22.1.3", "status": "affected" }, { "version": "9.22.1.2", "status": "affected" }, { "version": "9.22.1.6", "status": "affected" }, { "version": "9.22.2", "status": "affected" }, { "version": "9.22.2.4", "status": "affected" }, { "version": "9.22.2.9", "status": "affected" }, { "version": "9.22.2.13", "status": "affected" }, { "version": "9.23.1", "status": "affected" }, { "version": "9.23.1.3", "status": "affected" }, { "version": "9.23.1.7", "status": "affected" }, { "version": "9.23.1.13", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [ { "version": "6.2.3", "status": "affected" }, { "version": "6.2.3.1", "status": "affected" }, { "version": "6.2.3.2", "status": "affected" }, { "version": "6.2.3.3", "status": "affected" }, { "version": "6.2.3.4", "status": "affected" }, { "version": "6.2.3.5", "status": "affected" }, { "version": "6.2.3.6", "status": "affected" }, { "version": "6.2.3.7", "status": "affected" }, { "version": "6.2.3.8", "status": "affected" }, { "version": "6.2.3.10", "status": "affected" }, { "version": "6.2.3.11", "status": "affected" }, { "version": "6.2.3.9", "status": "affected" }, { "version": "6.2.3.12", "status": "affected" }, { "version": "6.2.3.13", "status": "affected" }, { "version": "6.2.3.14", "status": "affected" }, { "version": "6.2.3.15", "status": "affected" }, { "version": "6.2.3.16", "status": "affected" }, { "version": "6.2.3.17", "status": "affected" }, { "version": "6.2.3.18", "status": "affected" }, { "version": "6.6.0", "status": "affected" }, { "version": "6.6.0.1", "status": "affected" }, { "version": "6.6.1", "status": "affected" }, { "version": "6.6.3", "status": "affected" }, { "version": "6.6.4", "status": "affected" }, { "version": "6.6.5", "status": "affected" }, { "version": "6.6.5.1", "status": "affected" }, { "version": "6.6.5.2", "status": "affected" }, { "version": "6.6.7", "status": "affected" }, { "version": "6.6.7.1", "status": "affected" }, { "version": "6.6.7.2", "status": "affected" }, { "version": "6.4.0", "status": "affected" }, { "version": "6.4.0.1", "status": "affected" }, { "version": "6.4.0.3", "status": "affected" }, { "version": "6.4.0.2", "status": "affected" }, { "version": "6.4.0.4", "status": "affected" }, { "version": "6.4.0.5", "status": "affected" }, { "version": "6.4.0.6", "status": "affected" }, { "version": "6.4.0.7", "status": "affected" }, { "version": "6.4.0.8", "status": "affected" }, { "version": "6.4.0.9", "status": "affected" }, { "version": "6.4.0.10", "status": "affected" }, { "version": "6.4.0.11", "status": "affected" }, { "version": "6.4.0.12", "status": "affected" }, { "version": "6.4.0.13", "status": "affected" }, { "version": "6.4.0.14", "status": "affected" }, { "version": "6.4.0.15", "status": "affected" }, { "version": "6.4.0.16", "status": "affected" }, { "version": "6.4.0.17", "status": "affected" }, { "version": "6.4.0.18", "status": "affected" }, { "version": "7.0.0", "status": "affected" }, { "version": "7.0.0.1", "status": "affected" }, { "version": "7.0.1", "status": "affected" }, { "version": "7.0.1.1", "status": "affected" }, { "version": "7.0.2", "status": "affected" }, { "version": "7.0.2.1", "status": "affected" }, { "version": "7.0.3", "status": "affected" }, { "version": "7.0.4", "status": "affected" }, { "version": "7.0.5", "status": "affected" }, { "version": "7.0.6", "status": "affected" }, { "version": "7.0.6.1", "status": "affected" }, { "version": "7.0.6.2", "status": "affected" }, { "version": "7.0.6.3", "status": "affected" }, { "version": "7.0.7", "status": "affected" }, { "version": "7.0.8", "status": "affected" }, { "version": "7.1.0", "status": "affected" }, { "version": "7.1.0.1", "status": "affected" }, { "version": "7.1.0.2", "status": "affected" }, { "version": "7.1.0.3", "status": "affected" }, { "version": "7.2.0", "status": "affected" }, { "version": "7.2.0.1", "status": "affected" }, { "version": "7.2.1", "status": "affected" }, { "version": "7.2.2", "status": "affected" }, { "version": "7.2.3", "status": "affected" }, { "version": "7.2.4", "status": "affected" }, { "version": "7.2.4.1", "status": "affected" }, { "version": "7.2.5", "status": "affected" }, { "version": "7.2.5.1", "status": "affected" }, { "version": "7.2.6", "status": "affected" }, { "version": "7.2.7", "status": "affected" }, { "version": "7.2.5.2", "status": "affected" }, { "version": "7.2.8", "status": "affected" }, { "version": "7.2.8.1", "status": "affected" }, { "version": "7.2.9", "status": "affected" }, { "version": "7.2.10", "status": "affected" }, { "version": "7.3.0", "status": "affected" }, { "version": "7.3.1", "status": "affected" }, { "version": "7.3.1.1", "status": "affected" }, { "version": "7.3.1.2", "status": "affected" }, { "version": "7.4.0", "status": "affected" }, { "version": "7.4.1", "status": "affected" }, { "version": "7.4.1.1", "status": "affected" }, { "version": "7.4.2", "status": "affected" }, { "version": "7.4.2.1", "status": "affected" }, { "version": "7.4.2.2", "status": "affected" }, { "version": "7.4.2.3", "status": "affected" }, { "version": "7.6.0", "status": "affected" }, { "version": "7.6.1", "status": "affected" }, { "version": "7.6.2", "status": "affected" }, { "version": "7.7.0", "status": "affected" }, { "version": "7.7.10", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-20362", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "fetchedAt": "2026-10-24T04:41:49.394Z", "publishedAt": "2025-09-25T16:12:35.916Z", "modifiedAt": "2026-02-26T17:47:57.719Z", "state": "published", "provider": "cisco", "title": "", "descriptions": [ { "lang": "en", "value": "Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software [\"#fs\"] section of this advisory.\r\n\r A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "9.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "9.8.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "9.8.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "9.8.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "9.8.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "9.8.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "9.8.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "9.8.2.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/8", "version": "9.8.2.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/9", "version": "9.8.2.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/10", "version": "9.8.2.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/11", "version": "9.8.2.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/12", "version": "9.8.2.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/13", "version": "9.8.2.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/14", "version": "9.8.2.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/15", "version": "9.8.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/16", "version": "9.8.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/17", "version": "9.8.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/18", "version": "9.8.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/19", "version": "9.8.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/20", "version": "9.8.3.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/21", "version": "9.8.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/22", "version": "9.8.3.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/23", "version": "9.8.3.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/24", "version": "9.8.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/25", "version": "9.8.4.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/26", "version": "9.8.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/27", "version": "9.8.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/28", "version": "9.8.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/29", "version": "9.8.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/30", "version": "9.8.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/31", "version": "9.8.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/32", "version": "9.8.2.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/33", "version": "9.8.4.25", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/34", "version": "9.8.4.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/35", "version": "9.8.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/36", "version": "9.8.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/37", "version": "9.8.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/38", "version": "9.8.4.32", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/39", "version": "9.8.4.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/40", "version": "9.8.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/41", "version": "9.8.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/42", "version": "9.8.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/43", "version": "9.8.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/44", "version": "9.8.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/45", "version": "9.8.4.43", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/46", "version": "9.8.4.44", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/47", "version": "9.8.4.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/48", "version": "9.8.4.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/49", "version": "9.8.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/50", "version": "9.12.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/51", "version": "9.12.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/52", "version": "9.12.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/53", "version": "9.12.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/54", "version": "9.12.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/55", "version": "9.12.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/56", "version": "9.12.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/57", "version": "9.12.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/58", "version": "9.12.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/59", "version": "9.12.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/60", "version": "9.12.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/61", "version": "9.12.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/62", "version": "9.12.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/63", "version": "9.12.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/64", "version": "9.12.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/65", "version": "9.12.4.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/66", "version": "9.12.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/67", "version": "9.12.4.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/68", "version": "9.12.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/69", "version": "9.12.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/70", "version": "9.12.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/71", "version": "9.12.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/72", "version": "9.12.4.26", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/73", "version": "9.12.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/74", "version": "9.12.4.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/75", "version": "9.12.4.35", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/76", "version": "9.12.4.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/77", "version": "9.12.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/78", "version": "9.12.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/79", "version": "9.12.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/80", "version": "9.12.4.41", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/81", "version": "9.12.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/82", "version": "9.12.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/83", "version": "9.12.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/84", "version": "9.12.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/85", "version": "9.12.4.54", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/86", "version": "9.12.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/87", "version": "9.12.4.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/88", "version": "9.12.4.58", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/89", "version": "9.12.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/90", "version": "9.12.4.65", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/91", "version": "9.12.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/92", "version": "9.14.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/93", "version": "9.14.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/94", "version": "9.14.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/95", "version": "9.14.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/96", "version": "9.14.1.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/97", "version": "9.14.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/98", "version": "9.14.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/99", "version": "9.14.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/100", "version": "9.14.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/101", "version": "9.14.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/102", "version": "9.14.2.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/103", "version": "9.14.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/104", "version": "9.14.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/105", "version": "9.14.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/106", "version": "9.14.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/107", "version": "9.14.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/108", "version": "9.14.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/109", "version": "9.14.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/110", "version": "9.14.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/111", "version": "9.14.4.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/112", "version": "9.14.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/113", "version": "9.14.4.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/114", "version": "9.14.4.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/115", "version": "9.14.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/116", "version": "9.14.4.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/117", "version": "9.14.4.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/118", "version": "9.14.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/119", "version": "9.14.4.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/120", "version": "9.14.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/121", "version": "9.16.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/122", "version": "9.16.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/123", "version": "9.16.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/124", "version": "9.16.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/125", "version": "9.16.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/126", "version": "9.16.2.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/127", "version": "9.16.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/128", "version": "9.16.2.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/129", "version": "9.16.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/130", "version": "9.16.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/131", "version": "9.16.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/132", "version": "9.16.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/133", "version": "9.16.3.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/134", "version": "9.16.3.23", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/135", "version": "9.16.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/136", "version": "9.16.4.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/137", "version": "9.16.4.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/138", "version": "9.16.4.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/139", "version": "9.16.4.19", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/140", "version": "9.16.4.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/141", "version": "9.16.4.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/142", "version": "9.16.4.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/143", "version": "9.16.4.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/144", "version": "9.16.4.48", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/145", "version": "9.16.4.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/146", "version": "9.16.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/147", "version": "9.16.4.61", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/148", "version": "9.16.4.62", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/149", "version": "9.16.4.67", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/150", "version": "9.16.4.70", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/151", "version": "9.16.4.71", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/152", "version": "9.16.4.76", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/153", "version": "9.16.4.82", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/154", "version": "9.16.4.84", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/155", "version": "9.17.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/156", "version": "9.17.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/157", "version": "9.17.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/158", "version": "9.17.1.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/159", "version": "9.17.1.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/160", "version": "9.17.1.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/161", "version": "9.17.1.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/162", "version": "9.17.1.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/163", "version": "9.17.1.30", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/164", "version": "9.17.1.33", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/165", "version": "9.17.1.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/166", "version": "9.17.1.45", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/167", "version": "9.17.1.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/168", "version": "9.18.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/169", "version": "9.18.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/170", "version": "9.18.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/171", "version": "9.18.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/172", "version": "9.18.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/173", "version": "9.18.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/174", "version": "9.18.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/175", "version": "9.18.3.39", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/176", "version": "9.18.3.46", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/177", "version": "9.18.3.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/178", "version": "9.18.3.55", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/179", "version": "9.18.3.56", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/180", "version": "9.18.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/181", "version": "9.18.4.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/182", "version": "9.18.4.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/183", "version": "9.18.4.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/184", "version": "9.18.4.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/185", "version": "9.18.4.29", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/186", "version": "9.18.4.34", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/187", "version": "9.18.4.40", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/188", "version": "9.18.4.47", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/189", "version": "9.18.4.50", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/190", "version": "9.18.4.52", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/191", "version": "9.18.4.53", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/192", "version": "9.18.4.57", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/193", "version": "9.18.4.66", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/194", "version": "9.19.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/195", "version": "9.19.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/196", "version": "9.19.1.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/197", "version": "9.19.1.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/198", "version": "9.19.1.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/199", "version": "9.19.1.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/200", "version": "9.19.1.24", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/201", "version": "9.19.1.27", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/202", "version": "9.19.1.28", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/203", "version": "9.19.1.31", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/204", "version": "9.19.1.37", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/205", "version": "9.19.1.38", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/206", "version": "9.19.1.42", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/207", "version": "9.20.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/208", "version": "9.20.1.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/209", "version": "9.20.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/210", "version": "9.20.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/211", "version": "9.20.2.21", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/212", "version": "9.20.2.22", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/213", "version": "9.20.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/214", "version": "9.20.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/215", "version": "9.20.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/216", "version": "9.20.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/217", "version": "9.20.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/218", "version": "9.20.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/219", "version": "9.20.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/220", "version": "9.20.3.20", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/221", "version": "9.20.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/222", "version": "9.20.4.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/223", "version": "9.22.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/224", "version": "9.22.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/225", "version": "9.22.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/226", "version": "9.22.1.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/227", "version": "9.22.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/228", "version": "9.22.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/229", "version": "9.22.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/230", "version": "9.22.2.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/231", "version": "9.23.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/232", "version": "9.23.1.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/233", "version": "9.23.1.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/234", "version": "9.23.1.13", "status": "affected" } ] }, { "vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "sourcePath": "/containers/cna/affected/1", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "6.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "6.2.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "6.2.3.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "6.2.3.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "6.2.3.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.2.3.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.2.3.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.2.3.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.2.3.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.2.3.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/10", "version": "6.2.3.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/11", "version": "6.2.3.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/12", "version": "6.2.3.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/13", "version": "6.2.3.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/14", "version": "6.2.3.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/15", "version": "6.2.3.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/16", "version": "6.2.3.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/17", "version": "6.2.3.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/18", "version": "6.2.3.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/19", "version": "6.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/20", "version": "6.6.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/21", "version": "6.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/22", "version": "6.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/23", "version": "6.6.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/24", "version": "6.6.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/25", "version": "6.6.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/26", "version": "6.6.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/27", "version": "6.6.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/28", "version": "6.6.7.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/29", "version": "6.6.7.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/30", "version": "6.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/31", "version": "6.4.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/32", "version": "6.4.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/33", "version": "6.4.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/34", "version": "6.4.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/35", "version": "6.4.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/36", "version": "6.4.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/37", "version": "6.4.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/38", "version": "6.4.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/39", "version": "6.4.0.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/40", "version": "6.4.0.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/41", "version": "6.4.0.11", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/42", "version": "6.4.0.12", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/43", "version": "6.4.0.13", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/44", "version": "6.4.0.14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/45", "version": "6.4.0.15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/46", "version": "6.4.0.16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/47", "version": "6.4.0.17", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/48", "version": "6.4.0.18", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/49", "version": "7.0.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/50", "version": "7.0.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/51", "version": "7.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/52", "version": "7.0.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/53", "version": "7.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/54", "version": "7.0.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/55", "version": "7.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/56", "version": "7.0.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/57", "version": "7.0.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/58", "version": "7.0.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/59", "version": "7.0.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/60", "version": "7.0.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/61", "version": "7.0.6.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/62", "version": "7.0.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/63", "version": "7.0.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/64", "version": "7.1.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/65", "version": "7.1.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/66", "version": "7.1.0.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/67", "version": "7.1.0.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/68", "version": "7.2.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/69", "version": "7.2.0.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/70", "version": "7.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/71", "version": "7.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/72", "version": "7.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/73", "version": "7.2.4", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/74", "version": "7.2.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/75", "version": "7.2.5", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/76", "version": "7.2.5.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/77", "version": "7.2.6", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/78", "version": "7.2.7", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/79", "version": "7.2.5.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/80", "version": "7.2.8", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/81", "version": "7.2.8.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/82", "version": "7.2.9", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/83", "version": "7.2.10", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/84", "version": "7.3.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/85", "version": "7.3.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/86", "version": "7.3.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/87", "version": "7.3.1.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/88", "version": "7.4.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/89", "version": "7.4.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/90", "version": "7.4.1.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/91", "version": "7.4.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/92", "version": "7.4.2.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/93", "version": "7.4.2.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/94", "version": "7.4.2.3", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/95", "version": "7.6.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/96", "version": "7.6.1", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/97", "version": "7.6.2", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/98", "version": "7.7.0", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/99", "version": "7.7.10", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [ { "lang": "en", "value": "The Cisco PSIRT is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.", "sourcePath": "/containers/cna/exploits/0/value" } ], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-862", "lang": "en", "description": "Missing Authorization", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "cisco", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "label": "cisco-sa-asaftd-webvpn-YROOTUW", "tags": [], "provider": "cisco", "sourcePath": "/containers/cna/references/0" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISA-ADP", "tags": [ "vendor-advisory" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20362", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.17.1.45\",\"status\":\"affected\"},{\"version\":\"9.17.1.46\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.18.4.47\",\"status\":\"affected\"},{\"version\":\"9.18.4.50\",\"status\":\"affected\"},{\"version\":\"9.18.4.52\",\"status\":\"affected\"},{\"version\":\"9.18.4.53\",\"status\":\"affected\"},{\"version\":\"9.18.4.57\",\"status\":\"affected\"},{\"version\":\"9.18.4.66\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.19.1.37\",\"status\":\"affected\"},{\"version\":\"9.19.1.38\",\"status\":\"affected\"},{\"version\":\"9.19.1.42\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.20.3.7\",\"status\":\"affected\"},{\"version\":\"9.20.3.9\",\"status\":\"affected\"},{\"version\":\"9.20.3.10\",\"status\":\"affected\"},{\"version\":\"9.20.3.13\",\"status\":\"affected\"},{\"version\":\"9.20.3.16\",\"status\":\"affected\"},{\"version\":\"9.20.3.20\",\"status\":\"affected\"},{\"version\":\"9.20.4\",\"status\":\"affected\"},{\"version\":\"9.20.4.7\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.3\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"},{\"version\":\"9.22.1.6\",\"status\":\"affected\"},{\"version\":\"9.22.2\",\"status\":\"affected\"},{\"version\":\"9.22.2.4\",\"status\":\"affected\"},{\"version\":\"9.22.2.9\",\"status\":\"affected\"},{\"version\":\"9.22.2.13\",\"status\":\"affected\"},{\"version\":\"9.23.1\",\"status\":\"affected\"},{\"version\":\"9.23.1.3\",\"status\":\"affected\"},{\"version\":\"9.23.1.7\",\"status\":\"affected\"},{\"version\":\"9.23.1.13\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.2.9\",\"status\":\"affected\"},{\"version\":\"7.2.10\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"version\":\"7.6.1\",\"status\":\"affected\"},{\"version\":\"7.6.2\",\"status\":\"affected\"},{\"version\":\"7.7.0\",\"status\":\"affected\"},{\"version\":\"7.7.10\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software [\"#fs\"] section of this advisory.\r\n\r A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/exploits/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/exploits/0/value", "text": "The Cisco PSIRT is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Missing Authorization\",\"type\":\"cwe\",\"cweId\":\"CWE-862\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-20362:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "sourcePath": "retained:/originalText", "text": "Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-20362:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "sourcePath": "retained:/sourceAction", "text": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "modifiedAt": "2025-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:47:57.719Z", "fetchedAt": "2026-10-24T04:41:49.394Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-25T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.", "sourceSummary": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Softwareにサービス停止に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "処理の停止や過大な負荷により、サービスを利用できなくなる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:49.394Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "0de11b4cc14d4c82d677caf490d1e27a85ff401f10039f7a8289bf69ef108ed0", "sourceModifiedAt": "2026-02-26T17:47:57.719Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Cisco Secure ASA ソフトウェアまたは Cisco Secure FTD ソフトウェアの VPN Web サーバーにおいて、ユーザー入力の検証が不十分なため、認証されていないリモート攻撃者がリモートアクセス VPN に関係する制限された URL エンドポイントへアクセスできる可能性があります。", "risk": "この脆弱性が悪用されると、未パッチのデバイスが予期せずリロードし、サービスが利用できなくなる（DoS）状態になる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証されていないリモートの外部からアクセスします。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象は Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアまたは Cisco Secure Firewall Threat Defense (FTD) ソフトウェアの VPN Web サーバーです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃には、リモートアクセス VPN に関連する制限された URL エンドポイントへアクセスすることが含まれます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃は、HTTP または HTTPS のリクエストに細工したデータを送信することで実行されます。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E1" ] }, { "text": "脆弱性は「Missing Authorization」（認可欠如、CWE‑862）に該当します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.16.4.62。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.16.4.71。影響ありとして記載：9.16.4.76。影響ありとして記載：9.16.4.82。影響ありとして記載：9.16.4.84。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.17.1.45。影響ありとして記載：9.17.1.46。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.18.4.29。影響ありとして記載：9.18.4.34。影響ありとして記載：9.18.4.40。影響ありとして記載：9.18.4.47。影響ありとして記載：9.18.4.50。影響ありとして記載：9.18.4.52。影響ありとして記載：9.18.4.53。影響ありとして記載：9.18.4.57。影響ありとして記載：9.18.4.66。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.19.1.37。影響ありとして記載：9.19.1.38。影響ありとして記載：9.19.1.42。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。影響ありとして記載：9.20.2.22。影響ありとして記載：9.20.3。影響ありとして記載：9.20.3.4。影響ありとして記載：9.20.3.7。影響ありとして記載：9.20.3.9。影響ありとして記載：9.20.3.10。影響ありとして記載：9.20.3.13。影響ありとして記載：9.20.3.16。影響ありとして記載：9.20.3.20。影響ありとして記載：9.20.4。影響ありとして記載：9.20.4.7。影響ありとして記載：9.22.1.1。影響ありとして記載：9.22.1.3。影響ありとして記載：9.22.1.2。影響ありとして記載：9.22.1.6。影響ありとして記載：9.22.2。影響ありとして記載：9.22.2.4。影響ありとして記載：9.22.2.9。影響ありとして記載：9.22.2.13。影響ありとして記載：9.23.1。影響ありとして記載：9.23.1.3。影響ありとして記載：9.23.1.7。影響ありとして記載：9.23.1.13。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.0.6.3。影響ありとして記載：7.0.7。影響ありとして記載：7.0.8。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.2.9。影響ありとして記載：7.2.10。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。影響ありとして記載：7.4.2。影響ありとして記載：7.4.2.1。影響ありとして記載：7.4.2.2。影響ありとして記載：7.4.2.3。影響ありとして記載：7.6.0。影響ありとして記載：7.6.1。影響ありとして記載：7.6.2。影響ありとして記載：7.7.0。影響ありとして記載：7.7.10。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20362", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-20362", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-20362", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "label": "CVE：cisco" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-20362", "label": "CVE公式レコード" }, { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW", "label": "cisco-sa-asaftd-webvpn-YROOTUW" }, { "url": "https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/eviction-strategies-tool/create-from-template", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks", "label": "CISAが示す関連情報" }, { "url": "https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by CVE-2025-20333 and CVE-2025-20362. This attack can cause unpatched devices to unexpectedly reload, leading to denial of service (DoS) conditions. Cisco strongly recommends that all customers upgrade to the fixed software releases that are listed in the Fixed Software [\"#fs\"] section of this advisory.\r\n\r A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourceField": "/containers/cna/problemTypes/0/descriptions/0", "excerpt": "{\"lang\":\"en\",\"description\":\"Missing Authorization\",\"type\":\"cwe\",\"cweId\":\"CWE-862\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\",\"versions\":[{\"version\":\"9.8.1\",\"status\":\"affected\"},{\"version\":\"9.8.1.5\",\"status\":\"affected\"},{\"version\":\"9.8.1.7\",\"status\":\"affected\"},{\"version\":\"9.8.2\",\"status\":\"affected\"},{\"version\":\"9.8.2.8\",\"status\":\"affected\"},{\"version\":\"9.8.2.14\",\"status\":\"affected\"},{\"version\":\"9.8.2.15\",\"status\":\"affected\"},{\"version\":\"9.8.2.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.20\",\"status\":\"affected\"},{\"version\":\"9.8.2.24\",\"status\":\"affected\"},{\"version\":\"9.8.2.26\",\"status\":\"affected\"},{\"version\":\"9.8.2.28\",\"status\":\"affected\"},{\"version\":\"9.8.2.33\",\"status\":\"affected\"},{\"version\":\"9.8.2.35\",\"status\":\"affected\"},{\"version\":\"9.8.2.38\",\"status\":\"affected\"},{\"version\":\"9.8.3.8\",\"status\":\"affected\"},{\"version\":\"9.8.3.11\",\"status\":\"affected\"},{\"version\":\"9.8.3.14\",\"status\":\"affected\"},{\"version\":\"9.8.3.16\",\"status\":\"affected\"},{\"version\":\"9.8.3.18\",\"status\":\"affected\"},{\"version\":\"9.8.3.21\",\"status\":\"affected\"},{\"version\":\"9.8.3\",\"status\":\"affected\"},{\"version\":\"9.8.3.26\",\"status\":\"affected\"},{\"version\":\"9.8.3.29\",\"status\":\"affected\"},{\"version\":\"9.8.4\",\"status\":\"affected\"},{\"version\":\"9.8.4.3\",\"status\":\"affected\"},{\"version\":\"9.8.4.7\",\"status\":\"affected\"},{\"version\":\"9.8.4.8\",\"status\":\"affected\"},{\"version\":\"9.8.4.10\",\"status\":\"affected\"},{\"version\":\"9.8.4.12\",\"status\":\"affected\"},{\"version\":\"9.8.4.15\",\"status\":\"affected\"},{\"version\":\"9.8.4.17\",\"status\":\"affected\"},{\"version\":\"9.8.2.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.25\",\"status\":\"affected\"},{\"version\":\"9.8.4.20\",\"status\":\"affected\"},{\"version\":\"9.8.4.22\",\"status\":\"affected\"},{\"version\":\"9.8.4.26\",\"status\":\"affected\"},{\"version\":\"9.8.4.29\",\"status\":\"affected\"},{\"version\":\"9.8.4.32\",\"status\":\"affected\"},{\"version\":\"9.8.4.33\",\"status\":\"affected\"},{\"version\":\"9.8.4.34\",\"status\":\"affected\"},{\"version\":\"9.8.4.35\",\"status\":\"affected\"},{\"version\":\"9.8.4.39\",\"status\":\"affected\"},{\"version\":\"9.8.4.40\",\"status\":\"affected\"},{\"version\":\"9.8.4.41\",\"status\":\"affected\"},{\"version\":\"9.8.4.43\",\"status\":\"affected\"},{\"version\":\"9.8.4.44\",\"status\":\"affected\"},{\"version\":\"9.8.4.45\",\"status\":\"affected\"},{\"version\":\"9.8.4.46\",\"status\":\"affected\"},{\"version\":\"9.8.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.1\",\"status\":\"affected\"},{\"version\":\"9.12.1.2\",\"status\":\"affected\"},{\"version\":\"9.12.1.3\",\"status\":\"affected\"},{\"version\":\"9.12.2\",\"status\":\"affected\"},{\"version\":\"9.12.2.4\",\"status\":\"affected\"},{\"version\":\"9.12.2.5\",\"status\":\"affected\"},{\"version\":\"9.12.2.9\",\"status\":\"affected\"},{\"version\":\"9.12.3\",\"status\":\"affected\"},{\"version\":\"9.12.3.2\",\"status\":\"affected\"},{\"version\":\"9.12.3.7\",\"status\":\"affected\"},{\"version\":\"9.12.4\",\"status\":\"affected\"},{\"version\":\"9.12.3.12\",\"status\":\"affected\"},{\"version\":\"9.12.3.9\",\"status\":\"affected\"},{\"version\":\"9.12.2.1\",\"status\":\"affected\"},{\"version\":\"9.12.4.2\",\"status\":\"affected\"},{\"version\":\"9.12.4.4\",\"status\":\"affected\"},{\"version\":\"9.12.4.7\",\"status\":\"affected\"},{\"version\":\"9.12.4.10\",\"status\":\"affected\"},{\"version\":\"9.12.4.13\",\"status\":\"affected\"},{\"version\":\"9.12.4.8\",\"status\":\"affected\"},{\"version\":\"9.12.4.18\",\"status\":\"affected\"},{\"version\":\"9.12.4.24\",\"status\":\"affected\"},{\"version\":\"9.12.4.26\",\"status\":\"affected\"},{\"version\":\"9.12.4.29\",\"status\":\"affected\"},{\"version\":\"9.12.4.30\",\"status\":\"affected\"},{\"version\":\"9.12.4.35\",\"status\":\"affected\"},{\"version\":\"9.12.4.37\",\"status\":\"affected\"},{\"version\":\"9.12.4.38\",\"status\":\"affected\"},{\"version\":\"9.12.4.39\",\"status\":\"affected\"},{\"version\":\"9.12.4.40\",\"status\":\"affected\"},{\"version\":\"9.12.4.41\",\"status\":\"affected\"},{\"version\":\"9.12.4.47\",\"status\":\"affected\"},{\"version\":\"9.12.4.48\",\"status\":\"affected\"},{\"version\":\"9.12.4.50\",\"status\":\"affected\"},{\"version\":\"9.12.4.52\",\"status\":\"affected\"},{\"version\":\"9.12.4.54\",\"status\":\"affected\"},{\"version\":\"9.12.4.55\",\"status\":\"affected\"},{\"version\":\"9.12.4.56\",\"status\":\"affected\"},{\"version\":\"9.12.4.58\",\"status\":\"affected\"},{\"version\":\"9.12.4.62\",\"status\":\"affected\"},{\"version\":\"9.12.4.65\",\"status\":\"affected\"},{\"version\":\"9.12.4.67\",\"status\":\"affected\"},{\"version\":\"9.14.1\",\"status\":\"affected\"},{\"version\":\"9.14.1.10\",\"status\":\"affected\"},{\"version\":\"9.14.1.6\",\"status\":\"affected\"},{\"version\":\"9.14.1.15\",\"status\":\"affected\"},{\"version\":\"9.14.1.19\",\"status\":\"affected\"},{\"version\":\"9.14.1.30\",\"status\":\"affected\"},{\"version\":\"9.14.2\",\"status\":\"affected\"},{\"version\":\"9.14.2.4\",\"status\":\"affected\"},{\"version\":\"9.14.2.8\",\"status\":\"affected\"},{\"version\":\"9.14.2.13\",\"status\":\"affected\"},{\"version\":\"9.14.2.15\",\"status\":\"affected\"},{\"version\":\"9.14.3\",\"status\":\"affected\"},{\"version\":\"9.14.3.1\",\"status\":\"affected\"},{\"version\":\"9.14.3.9\",\"status\":\"affected\"},{\"version\":\"9.14.3.11\",\"status\":\"affected\"},{\"version\":\"9.14.3.13\",\"status\":\"affected\"},{\"version\":\"9.14.3.18\",\"status\":\"affected\"},{\"version\":\"9.14.3.15\",\"status\":\"affected\"},{\"version\":\"9.14.4\",\"status\":\"affected\"},{\"version\":\"9.14.4.6\",\"status\":\"affected\"},{\"version\":\"9.14.4.7\",\"status\":\"affected\"},{\"version\":\"9.14.4.12\",\"status\":\"affected\"},{\"version\":\"9.14.4.13\",\"status\":\"affected\"},{\"version\":\"9.14.4.14\",\"status\":\"affected\"},{\"version\":\"9.14.4.15\",\"status\":\"affected\"},{\"version\":\"9.14.4.17\",\"status\":\"affected\"},{\"version\":\"9.14.4.22\",\"status\":\"affected\"},{\"version\":\"9.14.4.23\",\"status\":\"affected\"},{\"version\":\"9.14.4.24\",\"status\":\"affected\"},{\"version\":\"9.16.1\",\"status\":\"affected\"},{\"version\":\"9.16.1.28\",\"status\":\"affected\"},{\"version\":\"9.16.2\",\"status\":\"affected\"},{\"version\":\"9.16.2.3\",\"status\":\"affected\"},{\"version\":\"9.16.2.7\",\"status\":\"affected\"},{\"version\":\"9.16.2.11\",\"status\":\"affected\"},{\"version\":\"9.16.2.13\",\"status\":\"affected\"},{\"version\":\"9.16.2.14\",\"status\":\"affected\"},{\"version\":\"9.16.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.3\",\"status\":\"affected\"},{\"version\":\"9.16.3.14\",\"status\":\"affected\"},{\"version\":\"9.16.3.15\",\"status\":\"affected\"},{\"version\":\"9.16.3.19\",\"status\":\"affected\"},{\"version\":\"9.16.3.23\",\"status\":\"affected\"},{\"version\":\"9.16.4\",\"status\":\"affected\"},{\"version\":\"9.16.4.9\",\"status\":\"affected\"},{\"version\":\"9.16.4.14\",\"status\":\"affected\"},{\"version\":\"9.16.4.18\",\"status\":\"affected\"},{\"version\":\"9.16.4.19\",\"status\":\"affected\"},{\"version\":\"9.16.4.27\",\"status\":\"affected\"},{\"version\":\"9.16.4.38\",\"status\":\"affected\"},{\"version\":\"9.16.4.39\",\"status\":\"affected\"},{\"version\":\"9.16.4.42\",\"status\":\"affected\"},{\"version\":\"9.16.4.48\",\"status\":\"affected\"},{\"version\":\"9.16.4.55\",\"status\":\"affected\"},{\"version\":\"9.16.4.57\",\"status\":\"affected\"},{\"version\":\"9.16.4.61\",\"status\":\"affected\"},{\"version\":\"9.16.4.62\",\"status\":\"affected\"},{\"version\":\"9.16.4.67\",\"status\":\"affected\"},{\"version\":\"9.16.4.70\",\"status\":\"affected\"},{\"version\":\"9.16.4.71\",\"status\":\"affected\"},{\"version\":\"9.16.4.76\",\"status\":\"affected\"},{\"version\":\"9.16.4.82\",\"status\":\"affected\"},{\"version\":\"9.16.4.84\",\"status\":\"affected\"},{\"version\":\"9.17.1\",\"status\":\"affected\"},{\"version\":\"9.17.1.7\",\"status\":\"affected\"},{\"version\":\"9.17.1.9\",\"status\":\"affected\"},{\"version\":\"9.17.1.10\",\"status\":\"affected\"},{\"version\":\"9.17.1.11\",\"status\":\"affected\"},{\"version\":\"9.17.1.13\",\"status\":\"affected\"},{\"version\":\"9.17.1.15\",\"status\":\"affected\"},{\"version\":\"9.17.1.20\",\"status\":\"affected\"},{\"version\":\"9.17.1.30\",\"status\":\"affected\"},{\"version\":\"9.17.1.33\",\"status\":\"affected\"},{\"version\":\"9.17.1.39\",\"status\":\"affected\"},{\"version\":\"9.17.1.45\",\"status\":\"affected\"},{\"version\":\"9.17.1.46\",\"status\":\"affected\"},{\"version\":\"9.18.1\",\"status\":\"affected\"},{\"version\":\"9.18.1.3\",\"status\":\"affected\"},{\"version\":\"9.18.2\",\"status\":\"affected\"},{\"version\":\"9.18.2.5\",\"status\":\"affected\"},{\"version\":\"9.18.2.7\",\"status\":\"affected\"},{\"version\":\"9.18.2.8\",\"status\":\"affected\"},{\"version\":\"9.18.3\",\"status\":\"affected\"},{\"version\":\"9.18.3.39\",\"status\":\"affected\"},{\"version\":\"9.18.3.46\",\"status\":\"affected\"},{\"version\":\"9.18.3.53\",\"status\":\"affected\"},{\"version\":\"9.18.3.55\",\"status\":\"affected\"},{\"version\":\"9.18.3.56\",\"status\":\"affected\"},{\"version\":\"9.18.4\",\"status\":\"affected\"},{\"version\":\"9.18.4.5\",\"status\":\"affected\"},{\"version\":\"9.18.4.8\",\"status\":\"affected\"},{\"version\":\"9.18.4.22\",\"status\":\"affected\"},{\"version\":\"9.18.4.24\",\"status\":\"affected\"},{\"version\":\"9.18.4.29\",\"status\":\"affected\"},{\"version\":\"9.18.4.34\",\"status\":\"affected\"},{\"version\":\"9.18.4.40\",\"status\":\"affected\"},{\"version\":\"9.18.4.47\",\"status\":\"affected\"},{\"version\":\"9.18.4.50\",\"status\":\"affected\"},{\"version\":\"9.18.4.52\",\"status\":\"affected\"},{\"version\":\"9.18.4.53\",\"status\":\"affected\"},{\"version\":\"9.18.4.57\",\"status\":\"affected\"},{\"version\":\"9.18.4.66\",\"status\":\"affected\"},{\"version\":\"9.19.1\",\"status\":\"affected\"},{\"version\":\"9.19.1.5\",\"status\":\"affected\"},{\"version\":\"9.19.1.9\",\"status\":\"affected\"},{\"version\":\"9.19.1.12\",\"status\":\"affected\"},{\"version\":\"9.19.1.18\",\"status\":\"affected\"},{\"version\":\"9.19.1.22\",\"status\":\"affected\"},{\"version\":\"9.19.1.24\",\"status\":\"affected\"},{\"version\":\"9.19.1.27\",\"status\":\"affected\"},{\"version\":\"9.19.1.28\",\"status\":\"affected\"},{\"version\":\"9.19.1.31\",\"status\":\"affected\"},{\"version\":\"9.19.1.37\",\"status\":\"affected\"},{\"version\":\"9.19.1.38\",\"status\":\"affected\"},{\"version\":\"9.19.1.42\",\"status\":\"affected\"},{\"version\":\"9.20.1\",\"status\":\"affected\"},{\"version\":\"9.20.1.5\",\"status\":\"affected\"},{\"version\":\"9.20.2\",\"status\":\"affected\"},{\"version\":\"9.20.2.10\",\"status\":\"affected\"},{\"version\":\"9.20.2.21\",\"status\":\"affected\"},{\"version\":\"9.20.2.22\",\"status\":\"affected\"},{\"version\":\"9.20.3\",\"status\":\"affected\"},{\"version\":\"9.20.3.4\",\"status\":\"affected\"},{\"version\":\"9.20.3.7\",\"status\":\"affected\"},{\"version\":\"9.20.3.9\",\"status\":\"affected\"},{\"version\":\"9.20.3.10\",\"status\":\"affected\"},{\"version\":\"9.20.3.13\",\"status\":\"affected\"},{\"version\":\"9.20.3.16\",\"status\":\"affected\"},{\"version\":\"9.20.3.20\",\"status\":\"affected\"},{\"version\":\"9.20.4\",\"status\":\"affected\"},{\"version\":\"9.20.4.7\",\"status\":\"affected\"},{\"version\":\"9.22.1.1\",\"status\":\"affected\"},{\"version\":\"9.22.1.3\",\"status\":\"affected\"},{\"version\":\"9.22.1.2\",\"status\":\"affected\"},{\"version\":\"9.22.1.6\",\"status\":\"affected\"},{\"version\":\"9.22.2\",\"status\":\"affected\"},{\"version\":\"9.22.2.4\",\"status\":\"affected\"},{\"version\":\"9.22.2.9\",\"status\":\"affected\"},{\"version\":\"9.22.2.13\",\"status\":\"affected\"},{\"version\":\"9.23.1\",\"status\":\"affected\"},{\"version\":\"9.23.1.3\",\"status\":\"affected\"},{\"version\":\"9.23.1.7\",\"status\":\"affected\"},{\"version\":\"9.23.1.13\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/20xxx/CVE-2025-20362.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"Cisco\",\"product\":\"Cisco Secure Firewall Threat Defense (FTD) Software\",\"versions\":[{\"version\":\"6.2.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.1\",\"status\":\"affected\"},{\"version\":\"6.2.3.2\",\"status\":\"affected\"},{\"version\":\"6.2.3.3\",\"status\":\"affected\"},{\"version\":\"6.2.3.4\",\"status\":\"affected\"},{\"version\":\"6.2.3.5\",\"status\":\"affected\"},{\"version\":\"6.2.3.6\",\"status\":\"affected\"},{\"version\":\"6.2.3.7\",\"status\":\"affected\"},{\"version\":\"6.2.3.8\",\"status\":\"affected\"},{\"version\":\"6.2.3.10\",\"status\":\"affected\"},{\"version\":\"6.2.3.11\",\"status\":\"affected\"},{\"version\":\"6.2.3.9\",\"status\":\"affected\"},{\"version\":\"6.2.3.12\",\"status\":\"affected\"},{\"version\":\"6.2.3.13\",\"status\":\"affected\"},{\"version\":\"6.2.3.14\",\"status\":\"affected\"},{\"version\":\"6.2.3.15\",\"status\":\"affected\"},{\"version\":\"6.2.3.16\",\"status\":\"affected\"},{\"version\":\"6.2.3.17\",\"status\":\"affected\"},{\"version\":\"6.2.3.18\",\"status\":\"affected\"},{\"version\":\"6.6.0\",\"status\":\"affected\"},{\"version\":\"6.6.0.1\",\"status\":\"affected\"},{\"version\":\"6.6.1\",\"status\":\"affected\"},{\"version\":\"6.6.3\",\"status\":\"affected\"},{\"version\":\"6.6.4\",\"status\":\"affected\"},{\"version\":\"6.6.5\",\"status\":\"affected\"},{\"version\":\"6.6.5.1\",\"status\":\"affected\"},{\"version\":\"6.6.5.2\",\"status\":\"affected\"},{\"version\":\"6.6.7\",\"status\":\"affected\"},{\"version\":\"6.6.7.1\",\"status\":\"affected\"},{\"version\":\"6.6.7.2\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"status\":\"affected\"},{\"version\":\"6.4.0.1\",\"status\":\"affected\"},{\"version\":\"6.4.0.3\",\"status\":\"affected\"},{\"version\":\"6.4.0.2\",\"status\":\"affected\"},{\"version\":\"6.4.0.4\",\"status\":\"affected\"},{\"version\":\"6.4.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.0.6\",\"status\":\"affected\"},{\"version\":\"6.4.0.7\",\"status\":\"affected\"},{\"version\":\"6.4.0.8\",\"status\":\"affected\"},{\"version\":\"6.4.0.9\",\"status\":\"affected\"},{\"version\":\"6.4.0.10\",\"status\":\"affected\"},{\"version\":\"6.4.0.11\",\"status\":\"affected\"},{\"version\":\"6.4.0.12\",\"status\":\"affected\"},{\"version\":\"6.4.0.13\",\"status\":\"affected\"},{\"version\":\"6.4.0.14\",\"status\":\"affected\"},{\"version\":\"6.4.0.15\",\"status\":\"affected\"},{\"version\":\"6.4.0.16\",\"status\":\"affected\"},{\"version\":\"6.4.0.17\",\"status\":\"affected\"},{\"version\":\"6.4.0.18\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"status\":\"affected\"},{\"version\":\"7.0.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1\",\"status\":\"affected\"},{\"version\":\"7.0.1.1\",\"status\":\"affected\"},{\"version\":\"7.0.2\",\"status\":\"affected\"},{\"version\":\"7.0.2.1\",\"status\":\"affected\"},{\"version\":\"7.0.3\",\"status\":\"affected\"},{\"version\":\"7.0.4\",\"status\":\"affected\"},{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"7.0.6\",\"status\":\"affected\"},{\"version\":\"7.0.6.1\",\"status\":\"affected\"},{\"version\":\"7.0.6.2\",\"status\":\"affected\"},{\"version\":\"7.0.6.3\",\"status\":\"affected\"},{\"version\":\"7.0.7\",\"status\":\"affected\"},{\"version\":\"7.0.8\",\"status\":\"affected\"},{\"version\":\"7.1.0\",\"status\":\"affected\"},{\"version\":\"7.1.0.1\",\"status\":\"affected\"},{\"version\":\"7.1.0.2\",\"status\":\"affected\"},{\"version\":\"7.1.0.3\",\"status\":\"affected\"},{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.2.0.1\",\"status\":\"affected\"},{\"version\":\"7.2.1\",\"status\":\"affected\"},{\"version\":\"7.2.2\",\"status\":\"affected\"},{\"version\":\"7.2.3\",\"status\":\"affected\"},{\"version\":\"7.2.4\",\"status\":\"affected\"},{\"version\":\"7.2.4.1\",\"status\":\"affected\"},{\"version\":\"7.2.5\",\"status\":\"affected\"},{\"version\":\"7.2.5.1\",\"status\":\"affected\"},{\"version\":\"7.2.6\",\"status\":\"affected\"},{\"version\":\"7.2.7\",\"status\":\"affected\"},{\"version\":\"7.2.5.2\",\"status\":\"affected\"},{\"version\":\"7.2.8\",\"status\":\"affected\"},{\"version\":\"7.2.8.1\",\"status\":\"affected\"},{\"version\":\"7.2.9\",\"status\":\"affected\"},{\"version\":\"7.2.10\",\"status\":\"affected\"},{\"version\":\"7.3.0\",\"status\":\"affected\"},{\"version\":\"7.3.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.1\",\"status\":\"affected\"},{\"version\":\"7.3.1.2\",\"status\":\"affected\"},{\"version\":\"7.4.0\",\"status\":\"affected\"},{\"version\":\"7.4.1\",\"status\":\"affected\"},{\"version\":\"7.4.1.1\",\"status\":\"affected\"},{\"version\":\"7.4.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.1\",\"status\":\"affected\"},{\"version\":\"7.4.2.2\",\"status\":\"affected\"},{\"version\":\"7.4.2.3\",\"status\":\"affected\"},{\"version\":\"7.6.0\",\"status\":\"affected\"},{\"version\":\"7.6.1\",\"status\":\"affected\"},{\"version\":\"7.6.2\",\"status\":\"affected\"},{\"version\":\"7.7.0\",\"status\":\"affected\"},{\"version\":\"7.7.10\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-20362", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-20362\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-20362（Cisco Secure Firewall Adaptive Security Appliance (ASA) Software / Cisco Secure Firewall Threat Defense (FTD) Software）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証されていないリモートの外部からアクセスします。\n・対象は Cisco Secure Firewall Adaptive Security Appliance (ASA) ソフトウェアまたは Cisco Secure Firewall Threat Defense (FTD) ソフトウェアの VPN Web サーバーです。\n・攻撃には、リモートアクセス VPN に関連する制限された URL エンドポイントへアクセスすることが含まれます。\n・攻撃は、HTTP または HTTPS のリクエストに細工したデータを送信することで実行されます。\n・脆弱性は「Missing Authorization」（認可欠如、CWE‑862）に該当します。\n・公式の対象表：Cisco / Cisco Secure Firewall Adaptive Security Appliance (ASA) Software。影響ありとして記載：9.8.1。影響ありとして記載：9.8.1.5。影響ありとして記載：9.8.1.7。影響ありとして記載：9.8.2。影響ありとして記載：9.8.2.8。影響ありとして記載：9.8.2.14。影響ありとして記載：9.8.2.15。影響ありとして記載：9.8.2.17。影響ありとして記載：9.8.2.20。影響ありとして記載：9.8.2.24。影響ありとして記載：9.8.2.26。影響ありとして記載：9.8.2.28。影響ありとして記載：9.8.2.33。影響ありとして記載：9.8.2.35。影響ありとして記載：9.8.2.38。影響ありとして記載：9.8.3.8。影響ありとして記載：9.8.3.11。影響ありとして記載：9.8.3.14。影響ありとして記載：9.8.3.16。影響ありとして記載：9.8.3.18。影響ありとして記載：9.8.3.21。影響ありとして記載：9.8.3。影響ありとして記載：9.8.3.26。影響ありとして記載：9.8.3.29。影響ありとして記載：9.8.4。影響ありとして記載：9.8.4.3。影響ありとして記載：9.8.4.7。影響ありとして記載：9.8.4.8。影響ありとして記載：9.8.4.10。影響ありとして記載：9.8.4.12。影響ありとして記載：9.8.4.15。影響ありとして記載：9.8.4.17。影響ありとして記載：9.8.2.45。影響ありとして記載：9.8.4.25。影響ありとして記載：9.8.4.20。影響ありとして記載：9.8.4.22。影響ありとして記載：9.8.4.26。影響ありとして記載：9.8.4.29。影響ありとして記載：9.8.4.32。影響ありとして記載：9.8.4.33。影響ありとして記載：9.8.4.34。影響ありとして記載：9.8.4.35。影響ありとして記載：9.8.4.39。影響ありとして記載：9.8.4.40。影響ありとして記載：9.8.4.41。影響ありとして記載：9.8.4.43。影響ありとして記載：9.8.4.44。影響ありとして記載：9.8.4.45。影響ありとして記載：9.8.4.46。影響ありとして記載：9.8.4.48。影響ありとして記載：9.12.1。影響ありとして記載：9.12.1.2。影響ありとして記載：9.12.1.3。影響ありとして記載：9.12.2。影響ありとして記載：9.12.2.4。影響ありとして記載：9.12.2.5。影響ありとして記載：9.12.2.9。影響ありとして記載：9.12.3。影響ありとして記載：9.12.3.2。影響ありとして記載：9.12.3.7。影響ありとして記載：9.12.4。影響ありとして記載：9.12.3.12。影響ありとして記載：9.12.3.9。影響ありとして記載：9.12.2.1。影響ありとして記載：9.12.4.2。影響ありとして記載：9.12.4.4。影響ありとして記載：9.12.4.7。影響ありとして記載：9.12.4.10。影響ありとして記載：9.12.4.13。影響ありとして記載：9.12.4.8。影響ありとして記載：9.12.4.18。影響ありとして記載：9.12.4.24。影響ありとして記載：9.12.4.26。影響ありとして記載：9.12.4.29。影響ありとして記載：9.12.4.30。影響ありとして記載：9.12.4.35。影響ありとして記載：9.12.4.37。影響ありとして記載：9.12.4.38。影響ありとして記載：9.12.4.39。影響ありとして記載：9.12.4.40。影響ありとして記載：9.12.4.41。影響ありとして記載：9.12.4.47。影響ありとして記載：9.12.4.48。影響ありとして記載：9.12.4.50。影響ありとして記載：9.12.4.52。影響ありとして記載：9.12.4.54。影響ありとして記載：9.12.4.55。影響ありとして記載：9.12.4.56。影響ありとして記載：9.12.4.58。影響ありとして記載：9.12.4.62。影響ありとして記載：9.12.4.65。影響ありとして記載：9.12.4.67。影響ありとして記載：9.14.1。影響ありとして記載：9.14.1.10。影響ありとして記載：9.14.1.6。影響ありとして記載：9.14.1.15。影響ありとして記載：9.14.1.19。影響ありとして記載：9.14.1.30。影響ありとして記載：9.14.2。影響ありとして記載：9.14.2.4。影響ありとして記載：9.14.2.8。影響ありとして記載：9.14.2.13。影響ありとして記載：9.14.2.15。影響ありとして記載：9.14.3。影響ありとして記載：9.14.3.1。影響ありとして記載：9.14.3.9。影響ありとして記載：9.14.3.11。影響ありとして記載：9.14.3.13。影響ありとして記載：9.14.3.18。影響ありとして記載：9.14.3.15。影響ありとして記載：9.14.4。影響ありとして記載：9.14.4.6。影響ありとして記載：9.14.4.7。影響ありとして記載：9.14.4.12。影響ありとして記載：9.14.4.13。影響ありとして記載：9.14.4.14。影響ありとして記載：9.14.4.15。影響ありとして記載：9.14.4.17。影響ありとして記載：9.14.4.22。影響ありとして記載：9.14.4.23。影響ありとして記載：9.14.4.24。影響ありとして記載：9.16.1。影響ありとして記載：9.16.1.28。影響ありとして記載：9.16.2。影響ありとして記載：9.16.2.3。影響ありとして記載：9.16.2.7。影響ありとして記載：9.16.2.11。影響ありとして記載：9.16.2.13。影響ありとして記載：9.16.2.14。影響ありとして記載：9.16.3。影響ありとして記載：9.16.3.3。影響ありとして記載：9.16.3.14。影響ありとして記載：9.16.3.15。影響ありとして記載：9.16.3.19。影響ありとして記載：9.16.3.23。影響ありとして記載：9.16.4。影響ありとして記載：9.16.4.9。影響ありとして記載：9.16.4.14。影響ありとして記載：9.16.4.18。影響ありとして記載：9.16.4.19。影響ありとして記載：9.16.4.27。影響ありとして記載：9.16.4.38。影響ありとして記載：9.16.4.39。影響ありとして記載：9.16.4.42。影響ありとして記載：9.16.4.48。影響ありとして記載：9.16.4.55。影響ありとして記載：9.16.4.57。影響ありとして記載：9.16.4.61。影響ありとして記載：9.16.4.62。影響ありとして記載：9.16.4.67。影響ありとして記載：9.16.4.70。影響ありとして記載：9.16.4.71。影響ありとして記載：9.16.4.76。影響ありとして記載：9.16.4.82。影響ありとして記載：9.16.4.84。影響ありとして記載：9.17.1。影響ありとして記載：9.17.1.7。影響ありとして記載：9.17.1.9。影響ありとして記載：9.17.1.10。影響ありとして記載：9.17.1.11。影響ありとして記載：9.17.1.13。影響ありとして記載：9.17.1.15。影響ありとして記載：9.17.1.20。影響ありとして記載：9.17.1.30。影響ありとして記載：9.17.1.33。影響ありとして記載：9.17.1.39。影響ありとして記載：9.17.1.45。影響ありとして記載：9.17.1.46。影響ありとして記載：9.18.1。影響ありとして記載：9.18.1.3。影響ありとして記載：9.18.2。影響ありとして記載：9.18.2.5。影響ありとして記載：9.18.2.7。影響ありとして記載：9.18.2.8。影響ありとして記載：9.18.3。影響ありとして記載：9.18.3.39。影響ありとして記載：9.18.3.46。影響ありとして記載：9.18.3.53。影響ありとして記載：9.18.3.55。影響ありとして記載：9.18.3.56。影響ありとして記載：9.18.4。影響ありとして記載：9.18.4.5。影響ありとして記載：9.18.4.8。影響ありとして記載：9.18.4.22。影響ありとして記載：9.18.4.24。影響ありとして記載：9.18.4.29。影響ありとして記載：9.18.4.34。影響ありとして記載：9.18.4.40。影響ありとして記載：9.18.4.47。影響ありとして記載：9.18.4.50。影響ありとして記載：9.18.4.52。影響ありとして記載：9.18.4.53。影響ありとして記載：9.18.4.57。影響ありとして記載：9.18.4.66。影響ありとして記載：9.19.1。影響ありとして記載：9.19.1.5。影響ありとして記載：9.19.1.9。影響ありとして記載：9.19.1.12。影響ありとして記載：9.19.1.18。影響ありとして記載：9.19.1.22。影響ありとして記載：9.19.1.24。影響ありとして記載：9.19.1.27。影響ありとして記載：9.19.1.28。影響ありとして記載：9.19.1.31。影響ありとして記載：9.19.1.37。影響ありとして記載：9.19.1.38。影響ありとして記載：9.19.1.42。影響ありとして記載：9.20.1。影響ありとして記載：9.20.1.5。影響ありとして記載：9.20.2。影響ありとして記載：9.20.2.10。影響ありとして記載：9.20.2.21。影響ありとして記載：9.20.2.22。影響ありとして記載：9.20.3。影響ありとして記載：9.20.3.4。影響ありとして記載：9.20.3.7。影響ありとして記載：9.20.3.9。影響ありとして記載：9.20.3.10。影響ありとして記載：9.20.3.13。影響ありとして記載：9.20.3.16。影響ありとして記載：9.20.3.20。影響ありとして記載：9.20.4。影響ありとして記載：9.20.4.7。影響ありとして記載：9.22.1.1。影響ありとして記載：9.22.1.3。影響ありとして記載：9.22.1.2。影響ありとして記載：9.22.1.6。影響ありとして記載：9.22.2。影響ありとして記載：9.22.2.4。影響ありとして記載：9.22.2.9。影響ありとして記載：9.22.2.13。影響ありとして記載：9.23.1。影響ありとして記載：9.23.1.3。影響ありとして記載：9.23.1.7。影響ありとして記載：9.23.1.13。\n・公式の対象表：Cisco / Cisco Secure Firewall Threat Defense (FTD) Software。影響ありとして記載：6.2.3。影響ありとして記載：6.2.3.1。影響ありとして記載：6.2.3.2。影響ありとして記載：6.2.3.3。影響ありとして記載：6.2.3.4。影響ありとして記載：6.2.3.5。影響ありとして記載：6.2.3.6。影響ありとして記載：6.2.3.7。影響ありとして記載：6.2.3.8。影響ありとして記載：6.2.3.10。影響ありとして記載：6.2.3.11。影響ありとして記載：6.2.3.9。影響ありとして記載：6.2.3.12。影響ありとして記載：6.2.3.13。影響ありとして記載：6.2.3.14。影響ありとして記載：6.2.3.15。影響ありとして記載：6.2.3.16。影響ありとして記載：6.2.3.17。影響ありとして記載：6.2.3.18。影響ありとして記載：6.6.0。影響ありとして記載：6.6.0.1。影響ありとして記載：6.6.1。影響ありとして記載：6.6.3。影響ありとして記載：6.6.4。影響ありとして記載：6.6.5。影響ありとして記載：6.6.5.1。影響ありとして記載：6.6.5.2。影響ありとして記載：6.6.7。影響ありとして記載：6.6.7.1。影響ありとして記載：6.6.7.2。影響ありとして記載：6.4.0。影響ありとして記載：6.4.0.1。影響ありとして記載：6.4.0.3。影響ありとして記載：6.4.0.2。影響ありとして記載：6.4.0.4。影響ありとして記載：6.4.0.5。影響ありとして記載：6.4.0.6。影響ありとして記載：6.4.0.7。影響ありとして記載：6.4.0.8。影響ありとして記載：6.4.0.9。影響ありとして記載：6.4.0.10。影響ありとして記載：6.4.0.11。影響ありとして記載：6.4.0.12。影響ありとして記載：6.4.0.13。影響ありとして記載：6.4.0.14。影響ありとして記載：6.4.0.15。影響ありとして記載：6.4.0.16。影響ありとして記載：6.4.0.17。影響ありとして記載：6.4.0.18。影響ありとして記載：7.0.0。影響ありとして記載：7.0.0.1。影響ありとして記載：7.0.1。影響ありとして記載：7.0.1.1。影響ありとして記載：7.0.2。影響ありとして記載：7.0.2.1。影響ありとして記載：7.0.3。影響ありとして記載：7.0.4。影響ありとして記載：7.0.5。影響ありとして記載：7.0.6。影響ありとして記載：7.0.6.1。影響ありとして記載：7.0.6.2。影響ありとして記載：7.0.6.3。影響ありとして記載：7.0.7。影響ありとして記載：7.0.8。影響ありとして記載：7.1.0。影響ありとして記載：7.1.0.1。影響ありとして記載：7.1.0.2。影響ありとして記載：7.1.0.3。影響ありとして記載：7.2.0。影響ありとして記載：7.2.0.1。影響ありとして記載：7.2.1。影響ありとして記載：7.2.2。影響ありとして記載：7.2.3。影響ありとして記載：7.2.4。影響ありとして記載：7.2.4.1。影響ありとして記載：7.2.5。影響ありとして記載：7.2.5.1。影響ありとして記載：7.2.6。影響ありとして記載：7.2.7。影響ありとして記載：7.2.5.2。影響ありとして記載：7.2.8。影響ありとして記載：7.2.8.1。影響ありとして記載：7.2.9。影響ありとして記載：7.2.10。影響ありとして記載：7.3.0。影響ありとして記載：7.3.1。影響ありとして記載：7.3.1.1。影響ありとして記載：7.3.1.2。影響ありとして記載：7.4.0。影響ありとして記載：7.4.1。影響ありとして記載：7.4.1.1。影響ありとして記載：7.4.2。影響ありとして記載：7.4.2.1。影響ありとして記載：7.4.2.2。影響ありとして記載：7.4.2.3。影響ありとして記載：7.6.0。影響ありとして記載：7.6.1。影響ありとして記載：7.6.2。影響ありとして記載：7.7.0。影響ありとして記載：7.7.10。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-20362", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:49.394Z", "lastSuccess": "2026-10-24T04:41:49.394Z", "sourceCheckedAt": "2026-10-24T04:41:49.394Z", "errorCode": null }, "glossary": [ { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-10585", "aliases": [], "title": "Chrome：脆弱性情報", "summary": "Google Chrome のバージョン 140.0.7339.185 未満において、V8 エンジンの型混同により、細工した HTML ページを介してヒープ破壊が発生する可能性があります。", "risk": "ヒープ破壊が発生する可能性があります。", "product": "Chrome", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "Chrome", "cvssVector": null, "affected": [ { "product": "Chrome", "range": ">= 140.0.7339.185 / < 140.0.7339.185" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "label": "CISA KEV（悪用確認）" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "label": "CVE：Chrome" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-10585", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/445380761", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10585", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-24T16:17:11.576Z", "modifiedAt": "2026-07-14T12:39:19.935Z", "fetchedAt": "2026-10-24T06:02:42.833Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Chrome", "versions": [ { "version": "140.0.7339.185", "status": "affected", "lessThan": "140.0.7339.185", "versionType": "custom" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-10585", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "fetchedAt": "2026-10-24T06:02:42.833Z", "publishedAt": "2025-09-24T16:17:11.576Z", "modifiedAt": "2026-07-14T12:39:19.935Z", "state": "published", "provider": "Chrome", "title": "", "descriptions": [ { "lang": "en", "value": "Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Chrome", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "140.0.7339.185", "lessThan": "140.0.7339.185", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-843", "lang": "en", "description": "Type Confusion", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/0" }, { "url": "https://issues.chromium.org/issues/445380761", "label": "Chrome", "tags": [], "provider": "Chrome", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-10585", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "label": "siemens-SADP", "tags": [], "provider": "siemens-SADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"140.0.7339.185\",\"status\":\"affected\",\"lessThan\":\"140.0.7339.185\",\"versionType\":\"custom\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Type Confusion\",\"cweId\":\"CWE-843\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"REQUIRED\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-10585:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "sourcePath": "retained:/originalText", "text": "Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-10585:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "linked:https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "sourcePath": "details.cve-detail:#cve-2025-10585", "text": "SSA-470355\n\nVulnerability CVE-2025-10585\n\nType confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\nCVSS v3.1 Base Score\n8.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\nCWE\nCWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", "truncated": false, "representation": "html_text_excerpt", "relatedCve": "CVE-2025-10585", "relatedCves": [ "CVE-2025-10585" ], "scopeNote": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ], "limits": { "completeness": "bounded", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。 当該CVEを本文中に明記した、直接参照された公的機関・開発元の告知を追加しています。複数製品・CVEを含む告知の対策は、その製品・CVEとの対応関係を維持してください。 Siemensの複数CVE告知は当該CVEの個別節だけを取得しています。機種別の対象・対策表の対応は未確定のため省略しています。", "excludedLinkedSources": [], "scopedLinkedSources": [ { "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "sourcePath": "details.cve-detail:#cve-2025-10585", "note": "当該CVEの個別説明・評価だけを取得。機種ごとの対象範囲・対策表との対応は確定していないため、共通の修正版として利用しません。" } ] }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "modifiedAt": "2025-09-23T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true }, { "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "title": "SSA-470355", "relatedCves": [ "CVE-2025-10585" ] } ], "relatedDocuments": [ { "type": "html", "sourceType": "Siemens ProductCERT", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "title": "SSA-470355", "relatedCves": [ "CVE-2025-10585" ], "truncated": false } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-07-14T12:39:19.935Z", "fetchedAt": "2026-10-24T06:02:42.833Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-23T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Chromeに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:02:42.833Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "ff22397ad4f4d17d4aee10c9010684c49d6c7cc275931cfe08cc0391384d6282", "sourceModifiedAt": "2026-07-14T12:39:19.935Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Google Chrome のバージョン 140.0.7339.185 未満において、V8 エンジンの型混同により、細工した HTML ページを介してヒープ破壊が発生する可能性があります。", "risk": "ヒープ破壊が発生する可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1", "E2" ], "applicability": [ { "text": "Google Chrome のバージョン 140.0.7339.185 未満を使用している環境。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者が細工した HTML ページを閲覧させることができる場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも140.0.7339.185で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Chrome」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-10585", "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "https://issues.chromium.org/issues/445380761", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "https://nvd.nist.gov/vuln/detail/CVE-2025-10585" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-10585", "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "https://issues.chromium.org/issues/445380761", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "https://nvd.nist.gov/vuln/detail/CVE-2025-10585" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-10585", "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "https://issues.chromium.org/issues/445380761", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "https://nvd.nist.gov/vuln/detail/CVE-2025-10585" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。", "長い公式資料の一部を使って解説しています。対象製品・版・構成の全一覧は、併記した構造化データも管理担当者と照合してください。", "公式資料が長いため、取得できた一部の内容に基づく説明です。対象の版・例外・構成条件が省略されている可能性があるため、取得範囲だけで対象外とは判断しないでください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "label": "CVE：Chrome" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "label": "CISA KEV（悪用確認）" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "label": "CVE：Chrome" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-10585", "label": "CVE公式レコード" }, { "url": "https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html", "label": "CISAが示す関連情報" }, { "url": "https://issues.chromium.org/issues/445380761", "label": "CVE掲載の参考情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10585", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://cert-portal.siemens.com/productcert/html/ssa-470355.html", "sourceField": "details.cve-detail:#cve-2025-10585", "excerpt": "SSA-470355\n\nVulnerability CVE-2025-10585\n\nType confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\nCVSS v3.1 Base Score\n8.8\n\nCVSS v3.1 Vector\nCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\nCWE\nCWE-843: Access of Resource Using Incompatible Type ('Type Confusion')", "language": null, "representation": "html_text_excerpt" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/10xxx/CVE-2025-10585.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Chrome\",\"versions\":[{\"version\":\"140.0.7339.185\",\"status\":\"affected\",\"lessThan\":\"140.0.7339.185\",\"versionType\":\"custom\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-10585", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-10585\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-10585（Chrome）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Google Chrome のバージョン 140.0.7339.185 未満を使用している環境。\n・攻撃者が細工した HTML ページを閲覧させることができる場合。\n・公式の対象表：Google / Chrome。影響ありとして記載：対象表の開始値と上限がどちらも140.0.7339.185で、上限条件は「未満」です。この表だけでは範囲を確定できないため、説明文の対象範囲も照合してください。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-10585", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:02:42.833Z", "lastSuccess": "2026-10-24T06:02:42.833Z", "sourceCheckedAt": "2026-10-24T06:02:42.833Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-5086", "aliases": [], "title": "DELMIA Apriso：コード実行", "summary": "DELMIA Apriso のリリース 2020 からリリース 2025 までに存在する、信頼できないデータの逆シリアライズ脆弱性により、リモートでコードを実行される可能性があります。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードが実行され、システムが制御される恐れがあります。", "product": "DELMIA Apriso", "category": "other", "component": "package", "severity": "critical", "cvss": 9, "cvssVersion": "3.1", "cvssSource": "3DS", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "DELMIA Apriso", "range": ">= Release 2020 Golden / <= Release 2020 SP4" }, { "product": "DELMIA Apriso", "range": ">= Release 2021 Golden / <= Release 2021 SP3" }, { "product": "DELMIA Apriso", "range": ">= Release 2022 Golden / <= Release 2022 SP3" }, { "product": "DELMIA Apriso", "range": ">= Release 2023 Golden / <= Release 2023 SP3" }, { "product": "DELMIA Apriso", "range": ">= Release 2024 Golden / <= Release 2024 SP1" }, { "product": "DELMIA Apriso", "range": ">= Release 2025 Golden / <= Release 2025 SP1" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "label": "CVE：3DS" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-5086", "label": "CVE公式レコード" }, { "url": "https://www.3ds.com/vulnerability/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5086", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-06-02T17:42:42.620Z", "modifiedAt": "2026-02-26T18:27:41.738Z", "fetchedAt": "2026-10-24T04:41:51.279Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.", "sourceTitle": "Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "versions": [ { "status": "affected", "version": "Release 2020 Golden", "lessThanOrEqual": "Release 2020 SP4", "versionType": "custom" }, { "status": "affected", "version": "Release 2021 Golden", "lessThanOrEqual": "Release 2021 SP3", "versionType": "custom" }, { "status": "affected", "version": "Release 2022 Golden", "lessThanOrEqual": "Release 2022 SP3", "versionType": "custom" }, { "status": "affected", "version": "Release 2023 Golden", "lessThanOrEqual": "Release 2023 SP3", "versionType": "custom" }, { "status": "affected", "version": "Release 2024 Golden", "lessThanOrEqual": "Release 2024 SP1", "versionType": "custom" }, { "status": "affected", "version": "Release 2025 Golden", "lessThanOrEqual": "Release 2025 SP1", "versionType": "custom" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-5086", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "fetchedAt": "2026-10-24T04:41:51.279Z", "publishedAt": "2025-06-02T17:42:42.620Z", "modifiedAt": "2026-02-26T18:27:41.738Z", "state": "published", "provider": "3DS", "title": "Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025", "descriptions": [ { "lang": "en", "value": "A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Dassault Systèmes", "product": "DELMIA Apriso", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "Release 2020 Golden", "lessThanOrEqual": "Release 2020 SP4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "Release 2021 Golden", "lessThanOrEqual": "Release 2021 SP3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "Release 2022 Golden", "lessThanOrEqual": "Release 2022 SP3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "Release 2023 Golden", "lessThanOrEqual": "Release 2023 SP3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "Release 2024 Golden", "lessThanOrEqual": "Release 2024 SP1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "Release 2025 Golden", "lessThanOrEqual": "Release 2025 SP1", "versionType": "custom", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9, "baseSeverity": "CRITICAL", "provider": "3DS", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.3ds.com/vulnerability/advisories", "label": "3DS", "tags": [], "provider": "3DS", "sourcePath": "/containers/cna/references/0" }, { "url": "https://isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256", "label": "CISA-ADP", "tags": [ "media-coverage" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5086", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Dassault Systèmes\",\"product\":\"DELMIA Apriso\",\"versions\":[{\"status\":\"affected\",\"version\":\"Release 2020 Golden\",\"lessThanOrEqual\":\"Release 2020 SP4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2021 Golden\",\"lessThanOrEqual\":\"Release 2021 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2022 Golden\",\"lessThanOrEqual\":\"Release 2022 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2023 Golden\",\"lessThanOrEqual\":\"Release 2023 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2024 Golden\",\"lessThanOrEqual\":\"Release 2024 SP1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2025 Golden\",\"lessThanOrEqual\":\"Release 2025 SP1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of Untrusted Data\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\",\"baseSeverity\":\"CRITICAL\",\"baseScore\":9,\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-5086:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "sourcePath": "retained:/originalText", "text": "Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-5086:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "modifiedAt": "2025-09-11T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T18:27:41.738Z", "fetchedAt": "2026-10-24T04:41:51.279Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-11T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "DELMIA Aprisoにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:51.279Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "9f29cf1c840dd400e048a0801315119c1b9dea30c765faaea10de6f76624ece2", "sourceModifiedAt": "2026-02-26T18:27:41.738Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "DELMIA Apriso のリリース 2020 からリリース 2025 までに存在する、信頼できないデータの逆シリアライズ脆弱性により、リモートでコードを実行される可能性があります。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で攻撃者のコードが実行され、システムが制御される恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "公式の対象表：Dassault Systèmes / DELMIA Apriso。影響ありとして記載：Release 2020 Golden以上、Release 2020 SP4以下。影響ありとして記載：Release 2021 Golden以上、Release 2021 SP3以下。影響ありとして記載：Release 2022 Golden以上、Release 2022 SP3以下。影響ありとして記載：Release 2023 Golden以上、Release 2023 SP3以下。影響ありとして記載：Release 2024 Golden以上、Release 2024 SP1以下。影響ありとして記載：Release 2025 Golden以上、Release 2025 SP1以下。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json" ], "evidenceIds": [ "E3" ] }, { "text": "「DELMIA Apriso」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-5086", "https://www.3ds.com/vulnerability/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086", "https://nvd.nist.gov/vuln/detail/CVE-2025-5086" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-5086", "https://www.3ds.com/vulnerability/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086", "https://nvd.nist.gov/vuln/detail/CVE-2025-5086" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-5086", "https://www.3ds.com/vulnerability/advisories", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086", "https://nvd.nist.gov/vuln/detail/CVE-2025-5086" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "label": "CVE：3DS" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-5086", "label": "CVE公式レコード" }, { "url": "https://www.3ds.com/vulnerability/advisories", "label": "CVE掲載の参考情報" }, { "url": "https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5086", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourceField": "/containers/cna/title", "excerpt": "Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/5xxx/CVE-2025-5086.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Dassault Systèmes\",\"product\":\"DELMIA Apriso\",\"versions\":[{\"status\":\"affected\",\"version\":\"Release 2020 Golden\",\"lessThanOrEqual\":\"Release 2020 SP4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2021 Golden\",\"lessThanOrEqual\":\"Release 2021 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2022 Golden\",\"lessThanOrEqual\":\"Release 2022 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2023 Golden\",\"lessThanOrEqual\":\"Release 2023 SP3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2024 Golden\",\"lessThanOrEqual\":\"Release 2024 SP1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"Release 2025 Golden\",\"lessThanOrEqual\":\"Release 2025 SP1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-5086", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-5086\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-5086（DELMIA Apriso）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・公式の対象表：Dassault Systèmes / DELMIA Apriso。影響ありとして記載：Release 2020 Golden以上、Release 2020 SP4以下。影響ありとして記載：Release 2021 Golden以上、Release 2021 SP3以下。影響ありとして記載：Release 2022 Golden以上、Release 2022 SP3以下。影響ありとして記載：Release 2023 Golden以上、Release 2023 SP3以下。影響ありとして記載：Release 2024 Golden以上、Release 2024 SP1以下。影響ありとして記載：Release 2025 Golden以上、Release 2025 SP1以下。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-5086", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:51.279Z", "lastSuccess": "2026-10-24T04:41:51.279Z", "sourceCheckedAt": "2026-10-24T04:41:51.279Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-38352", "aliases": [], "title": "Linux：脆弱性情報", "summary": "Linux カーネルの posix‑cpu‑timers において、handle_posix_cpu_timers() と posix_cpu_timer_del() の間に競合状態があり、終了処理中のタスクが IRQ から handle_posix_cpu_timers() を呼び出した後に親プロセスやデバッガーにより直ちに回収される可能性があります。この競合が同時に posix_cpu_timer_del() が実行されると、timer->it.cpu.firing が 0 であることを検出できず、cpu_timer_task_rcu() や lock_task_sighand() が失敗します。修正として run_posix_cpu_timers() に tsk->exit_state のチェックが追加されました。CONFIG_POSIX_CPU_TIMERS_TASK_WORK が有効な場合はこの修正は不要ですが、チェックは依然として意味があります。", "risk": "この TOCTOU 競合状態は機密性、完全性、可用性に高い影響を及ぼす可能性があります。", "product": "Linux", "category": "linux", "component": "package", "severity": "high", "cvss": 7.8, "cvssVersion": "3.1", "cvssSource": "Linux", "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "affected": [ { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < 78a4b8e3795b31dae58762bc091bb0f4f74a2200" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < c076635b3a42771ace7d276de8dc3bc76ee2ba1b" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < 2f3daa04a9328220de46f0d5c919a6c0073a9f0b" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < 764a7a5dfda23f69919441f2eac2a83e7db6e5bb" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < 2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < c29d5318708e67ac13c1b6fc1007d179fb65b4d7" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < 460188bc042a3f40f72d34b9f7fc6ee66b0b757b" }, { "product": "Linux", "range": ">= 0bdd2ed4138ec04e09b4f8165981efc99e439f55 / < f90fff1e152dedf52b932240ebbd670d83330eca" }, { "product": "Linux", "range": "2.6.36" }, { "product": "Linux", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "label": "CVE：Linux" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-38352", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/78a4b8e3795b31dae58762bc091bb0f4f74a2200", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/c076635b3a42771ace7d276de8dc3bc76ee2ba1b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2f3daa04a9328220de46f0d5c919a6c0073a9f0b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/764a7a5dfda23f69919441f2eac2a83e7db6e5bb", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/c29d5318708e67ac13c1b6fc1007d179fb65b4d7", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/460188bc042a3f40f72d34b9f7fc6ee66b0b757b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/f90fff1e152dedf52b932240ebbd670d83330eca", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "label": "CISAが示す関連情報" }, { "url": "https://source.android.com/docs/security/bulletin/2025-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38352", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "publishedAt": "2025-07-22T08:04:25.277Z", "modifiedAt": "2026-09-08T15:32:28.302Z", "fetchedAt": "2026-10-24T04:41:53.322Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\n\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.", "sourceTitle": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "kernel/time/posix-cpu-timers.c" ], "versions": [ { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "78a4b8e3795b31dae58762bc091bb0f4f74a2200", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "c076635b3a42771ace7d276de8dc3bc76ee2ba1b", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "2f3daa04a9328220de46f0d5c919a6c0073a9f0b", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "764a7a5dfda23f69919441f2eac2a83e7db6e5bb", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "c29d5318708e67ac13c1b6fc1007d179fb65b4d7", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "460188bc042a3f40f72d34b9f7fc6ee66b0b757b", "status": "affected", "versionType": "git" }, { "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "f90fff1e152dedf52b932240ebbd670d83330eca", "status": "affected", "versionType": "git" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "kernel/time/posix-cpu-timers.c" ], "versions": [ { "version": "2.6.36", "status": "affected" }, { "version": "0", "lessThan": "2.6.36", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.295", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.239", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.186", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.142", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.94", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.12.34", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.15.3", "lessThanOrEqual": "6.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.16", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-38352", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "fetchedAt": "2026-10-24T04:41:53.322Z", "publishedAt": "2025-07-22T08:04:25.277Z", "modifiedAt": "2026-09-08T15:32:28.302Z", "state": "published", "provider": "Linux", "title": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()", "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\n\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/0", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [ "kernel/time/posix-cpu-timers.c" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "78a4b8e3795b31dae58762bc091bb0f4f74a2200", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "c076635b3a42771ace7d276de8dc3bc76ee2ba1b", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "2f3daa04a9328220de46f0d5c919a6c0073a9f0b", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "764a7a5dfda23f69919441f2eac2a83e7db6e5bb", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "c29d5318708e67ac13c1b6fc1007d179fb65b4d7", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "460188bc042a3f40f72d34b9f7fc6ee66b0b757b", "versionType": "git", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "0bdd2ed4138ec04e09b4f8165981efc99e439f55", "lessThan": "f90fff1e152dedf52b932240ebbd670d83330eca", "versionType": "git", "status": "affected" } ] }, { "vendor": "Linux", "product": "Linux", "sourcePath": "/containers/cna/affected/1", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [ "kernel/time/posix-cpu-timers.c" ], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "2.6.36", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "0", "lessThan": "2.6.36", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "5.4.295", "lessThanOrEqual": "5.4.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "5.10.239", "lessThanOrEqual": "5.10.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "5.15.186", "lessThanOrEqual": "5.15.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "6.1.142", "lessThanOrEqual": "6.1.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "6.6.94", "lessThanOrEqual": "6.6.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/7", "version": "6.12.34", "lessThanOrEqual": "6.12.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/8", "version": "6.15.3", "lessThanOrEqual": "6.15.*", "versionType": "semver", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/9", "version": "6.16", "lessThanOrEqual": "*", "versionType": "original_commit_for_fix", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "provider": "Linux", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://git.kernel.org/stable/c/78a4b8e3795b31dae58762bc091bb0f4f74a2200", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/0" }, { "url": "https://git.kernel.org/stable/c/c076635b3a42771ace7d276de8dc3bc76ee2ba1b", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/1" }, { "url": "https://git.kernel.org/stable/c/2f3daa04a9328220de46f0d5c919a6c0073a9f0b", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/2" }, { "url": "https://git.kernel.org/stable/c/764a7a5dfda23f69919441f2eac2a83e7db6e5bb", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/3" }, { "url": "https://git.kernel.org/stable/c/2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/4" }, { "url": "https://git.kernel.org/stable/c/c29d5318708e67ac13c1b6fc1007d179fb65b4d7", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/5" }, { "url": "https://git.kernel.org/stable/c/460188bc042a3f40f72d34b9f7fc6ee66b0b757b", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/6" }, { "url": "https://git.kernel.org/stable/c/f90fff1e152dedf52b932240ebbd670d83330eca", "label": "Linux", "tags": [], "provider": "Linux", "sourcePath": "/containers/cna/references/7" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-38352", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://github.com/farazsth98/chronomaly", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "label": "CVE", "tags": [], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"kernel/time/posix-cpu-timers.c\"],\"versions\":[{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"78a4b8e3795b31dae58762bc091bb0f4f74a2200\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"c076635b3a42771ace7d276de8dc3bc76ee2ba1b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"2f3daa04a9328220de46f0d5c919a6c0073a9f0b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"764a7a5dfda23f69919441f2eac2a83e7db6e5bb\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"c29d5318708e67ac13c1b6fc1007d179fb65b4d7\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"460188bc042a3f40f72d34b9f7fc6ee66b0b757b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"f90fff1e152dedf52b932240ebbd670d83330eca\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"kernel/time/posix-cpu-timers.c\"],\"versions\":[{\"version\":\"2.6.36\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.36\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.4.295\",\"lessThanOrEqual\":\"5.4.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.239\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.186\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.142\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.94\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.12.34\",\"lessThanOrEqual\":\"6.12.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.15.3\",\"lessThanOrEqual\":\"6.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.16\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\n\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-38352:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "sourcePath": "retained:/originalText", "text": "Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-38352:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-08T15:32:28.302Z", "fetchedAt": "2026-10-24T04:41:53.322Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Linuxに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:53.322Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "f6cce56756f2740ffa1c4500ec5d427815932a367d4e2c2c0784f6a80a774dc1", "sourceModifiedAt": "2026-09-08T15:32:28.302Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Linux カーネルの posix‑cpu‑timers において、handle_posix_cpu_timers() と posix_cpu_timer_del() の間に競合状態があり、終了処理中のタスクが IRQ から handle_posix_cpu_timers() を呼び出した後に親プロセスやデバッガーにより直ちに回収される可能性があります。この競合が同時に posix_cpu_timer_del() が実行されると、timer->it.cpu.firing が 0 であることを検出できず、cpu_timer_task_rcu() や lock_task_sighand() が失敗します。修正として run_posix_cpu_timers() に tsk->exit_state のチェックが追加されました。CONFIG_POSIX_CPU_TIMERS_TASK_WORK が有効な場合はこの修正は不要ですが、チェックは依然として意味があります。", "risk": "この TOCTOU 競合状態は機密性、完全性、可用性に高い影響を及ぼす可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E3" ], "applicability": [ { "text": "対象は、非自動回収 (non‑autoreaping) タスクで、exit_notify() を通過した後に IRQ コンテキストから handle_posix_cpu_timers() が呼び出される状況です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "上記の状況で、同時に posix_cpu_timer_del() が実行されると競合が発生します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CONFIG_POSIX_CPU_TIMERS_TASK_WORK が有効 (y) である場合、exit_task_work() が exit_notify() の前に呼び出されるため、この修正は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：Linux / Linux。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、78a4b8e3795b31dae58762bc091bb0f4f74a2200未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、c076635b3a42771ace7d276de8dc3bc76ee2ba1b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、2f3daa04a9328220de46f0d5c919a6c0073a9f0b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、764a7a5dfda23f69919441f2eac2a83e7db6e5bb未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、c29d5318708e67ac13c1b6fc1007d179fb65b4d7未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、460188bc042a3f40f72d34b9f7fc6ee66b0b757b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、f90fff1e152dedf52b932240ebbd670d83330eca未満。対象のファイル：kernel/time/posix-cpu-timers.c", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Linux / Linux。影響ありとして記載：2.6.36。影響なしとして記載：2.6.36未満の版。影響なしとして記載：5.4.295以上、5.4.*以下。影響なしとして記載：5.10.239以上、5.10.*以下。影響なしとして記載：5.15.186以上、5.15.*以下。影響なしとして記載：6.1.142以上、6.1.*以下。影響なしとして記載：6.6.94以上、6.6.*以下。影響なしとして記載：6.12.34以上、6.12.*以下。影響なしとして記載：6.15.3以上、6.15.*以下。影響なしとして記載：6.16以上（原資料の上限表記は「*」）。対象のファイル：kernel/time/posix-cpu-timers.c。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E4" ] }, { "text": "管理担当者に、Linuxの種類（Ubuntu、Red Hatなど）と版、対象パッケージ名、配布元を含む完全なパッケージ番号を確認してもらいます。OSの種類や製品の上流の番号だけで、影響の有無を決めないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "更新が用意されていない場合は、配布元や保守会社へCVE番号とパッケージ番号を送り、影響の有無・回避策・提供予定を確認します。他のLinux向けの修正をそのまま入れないでください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json" ], "evidenceIds": [ "E4" ] }, { "text": "修正後の完全なパッケージ番号と、その配布元のCVE対応表を照合します。古い番号のまま修正を取り込む場合があるため、数字が小さいという理由だけで未修正とは扱いません。管理者に必要な再起動の完了も確認してもらってください。", "kind": "procedure", "sourceUrls": [ "https://documentation.ubuntu.com/security/security-updates/", "https://access.redhat.com/solutions/57665" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "label": "CVE：Linux" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-38352", "label": "CVE公式レコード" }, { "url": "https://git.kernel.org/stable/c/78a4b8e3795b31dae58762bc091bb0f4f74a2200", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/c076635b3a42771ace7d276de8dc3bc76ee2ba1b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2f3daa04a9328220de46f0d5c919a6c0073a9f0b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/764a7a5dfda23f69919441f2eac2a83e7db6e5bb", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/c29d5318708e67ac13c1b6fc1007d179fb65b4d7", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/460188bc042a3f40f72d34b9f7fc6ee66b0b757b", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/stable/c/f90fff1e152dedf52b932240ebbd670d83330eca", "label": "CVE掲載の参考情報" }, { "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff", "label": "CISAが示す関連情報" }, { "url": "https://source.android.com/docs/security/bulletin/2025-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-38352", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://documentation.ubuntu.com/security/security-updates/", "label": "Ubuntu公式：セキュリティ更新と修正の確認" }, { "url": "https://access.redhat.com/solutions/57665", "label": "Red Hat公式：古い版への修正の取り込み" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In the Linux kernel, the following vulnerability has been resolved:\n\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\n\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\n\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\n\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\n\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourceField": "/containers/cna/title", "excerpt": "posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "sourceField": "retained:/originalText", "excerpt": "Linux kernel contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that has a high impact on confidentiality, integrity, and availability.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"unaffected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"kernel/time/posix-cpu-timers.c\"],\"versions\":[{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"78a4b8e3795b31dae58762bc091bb0f4f74a2200\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"c076635b3a42771ace7d276de8dc3bc76ee2ba1b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"2f3daa04a9328220de46f0d5c919a6c0073a9f0b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"764a7a5dfda23f69919441f2eac2a83e7db6e5bb\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"c29d5318708e67ac13c1b6fc1007d179fb65b4d7\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"460188bc042a3f40f72d34b9f7fc6ee66b0b757b\",\"status\":\"affected\",\"versionType\":\"git\"},{\"version\":\"0bdd2ed4138ec04e09b4f8165981efc99e439f55\",\"lessThan\":\"f90fff1e152dedf52b932240ebbd670d83330eca\",\"status\":\"affected\",\"versionType\":\"git\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/38xxx/CVE-2025-38352.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"product\":\"Linux\",\"vendor\":\"Linux\",\"defaultStatus\":\"affected\",\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"programFiles\":[\"kernel/time/posix-cpu-timers.c\"],\"versions\":[{\"version\":\"2.6.36\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.36\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.4.295\",\"lessThanOrEqual\":\"5.4.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.10.239\",\"lessThanOrEqual\":\"5.10.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"5.15.186\",\"lessThanOrEqual\":\"5.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.1.142\",\"lessThanOrEqual\":\"6.1.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.6.94\",\"lessThanOrEqual\":\"6.6.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.12.34\",\"lessThanOrEqual\":\"6.12.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.15.3\",\"lessThanOrEqual\":\"6.15.*\",\"status\":\"unaffected\",\"versionType\":\"semver\"},{\"version\":\"6.16\",\"lessThanOrEqual\":\"*\",\"status\":\"unaffected\",\"versionType\":\"original_commit_for_fix\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-38352", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-38352\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-38352（Linux）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・対象は、非自動回収 (non‑autoreaping) タスクで、exit_notify() を通過した後に IRQ コンテキストから handle_posix_cpu_timers() が呼び出される状況です。\n・上記の状況で、同時に posix_cpu_timer_del() が実行されると競合が発生します。\n・CONFIG_POSIX_CPU_TIMERS_TASK_WORK が有効 (y) である場合、exit_task_work() が exit_notify() の前に呼び出されるため、この修正は不要です。\n・公式の対象表：Linux / Linux。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、78a4b8e3795b31dae58762bc091bb0f4f74a2200未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、c076635b3a42771ace7d276de8dc3bc76ee2ba1b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、2f3daa04a9328220de46f0d5c919a6c0073a9f0b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、764a7a5dfda23f69919441f2eac2a83e7db6e5bb未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、c29d5318708e67ac13c1b6fc1007d179fb65b4d7未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、460188bc042a3f40f72d34b9f7fc6ee66b0b757b未満。影響ありとして記載：0bdd2ed4138ec04e09b4f8165981efc99e439f55以上、f90fff1e152dedf52b932240ebbd670d83330eca未満。対象のファイル：kernel/time/posix-cpu-timers.c\n・公式の対象表：Linux / Linux。影響ありとして記載：2.6.36。影響なしとして記載：2.6.36未満の版。影響なしとして記載：5.4.295以上、5.4.*以下。影響なしとして記載：5.10.239以上、5.10.*以下。影響なしとして記載：5.15.186以上、5.15.*以下。影響なしとして記載：6.1.142以上、6.1.*以下。影響なしとして記載：6.6.94以上、6.6.*以下。影響なしとして記載：6.12.34以上、6.12.*以下。影響なしとして記載：6.15.3以上、6.15.*以下。影響なしとして記載：6.16以上（原資料の上限表記は「*」）。対象のファイル：kernel/time/posix-cpu-timers.c。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-38352", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:53.322Z", "lastSuccess": "2026-10-24T04:41:53.322Z", "sourceCheckedAt": "2026-10-24T04:41:53.322Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-48543", "aliases": [], "title": "Android：脆弱性情報", "summary": "複数の箇所で、use‑after‑free のバグにより Chrome のサンドボックスから Android の system_server へエスケープできる可能性があり、追加の実行権限なしでローカル権限昇格が起こります。ユーザーの操作は不要です。", "risk": "攻撃者がローカルで権限を昇格し、システム上位の権限を取得できる可能性があります。", "product": "Android", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "google_android", "cvssVector": null, "affected": [ { "product": "Android", "range": "16" }, { "product": "Android", "range": "15" }, { "product": "Android", "range": "14" }, { "product": "Android", "range": "13" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48543", "label": "CVE公式レコード" }, { "url": "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/security/bulletin/2025-09-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2025-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48543", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-04T18:34:22.655Z", "modifiedAt": "2026-02-26T17:49:19.685Z", "fetchedAt": "2026-10-24T04:41:58.694Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "Google", "product": "Android", "versions": [ { "version": "16", "status": "affected" }, { "version": "15", "status": "affected" }, { "version": "14", "status": "affected" }, { "version": "13", "status": "affected" } ], "defaultStatus": "unaffected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-48543", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "fetchedAt": "2026-10-24T04:41:58.694Z", "publishedAt": "2025-09-04T18:34:22.655Z", "modifiedAt": "2026-02-26T17:49:19.685Z", "state": "published", "provider": "google_android", "title": "", "descriptions": [ { "lang": "en", "value": "In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Google", "product": "Android", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "16", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "15", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "14", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "13", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Elevation of privilege", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "label": "google_android", "tags": [], "provider": "google_android", "sourcePath": "/containers/cna/references/0" }, { "url": "https://source.android.com/security/bulletin/2025-09-01", "label": "google_android", "tags": [], "provider": "google_android", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-48543", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"16\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"14\",\"status\":\"affected\"},{\"version\":\"13\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"description\":\"Elevation of privilege\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/0/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourcePath": "/containers/adp/0/metrics/0/cvssV3_1", "text": "{\"scope\":\"CHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"LOCAL\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-48543:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "sourcePath": "retained:/originalText", "text": "Android Runtime contains a use-after-free vulnerability potentially allowing a chrome sandbox escape leading to local privilege escalation.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-48543:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:49:19.685Z", "fetchedAt": "2026-10-24T04:41:58.694Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Androidに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:58.694Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "12dd579485ea19140817b3622475f5a0608c9f48c68c4bfe45706cfffc7e1146", "sourceModifiedAt": "2026-02-26T17:49:19.685Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "複数の箇所で、use‑after‑free のバグにより Chrome のサンドボックスから Android の system_server へエスケープできる可能性があり、追加の実行権限なしでローカル権限昇格が起こります。ユーザーの操作は不要です。", "risk": "攻撃者がローカルで権限を昇格し、システム上位の権限を取得できる可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は追加の実行権限を必要としません。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃の実行にユーザー操作は不要です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E1" ] }, { "text": "Chrome のサンドボックスから Android の system_server へエスケープできる条件が存在します。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Google / Android。影響ありとして記載：16。影響ありとして記載：15。影響ありとして記載：14。影響ありとして記載：13。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E2" ] }, { "text": "「Android」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48543", "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "https://source.android.com/security/bulletin/2025-09-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "https://source.android.com/docs/security/bulletin/2025-09-01", "https://nvd.nist.gov/vuln/detail/CVE-2025-48543" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-48543", "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "https://source.android.com/security/bulletin/2025-09-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "https://source.android.com/docs/security/bulletin/2025-09-01", "https://nvd.nist.gov/vuln/detail/CVE-2025-48543" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-48543", "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "https://source.android.com/security/bulletin/2025-09-01", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "https://source.android.com/docs/security/bulletin/2025-09-01", "https://nvd.nist.gov/vuln/detail/CVE-2025-48543" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "label": "CVE：google_android" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-48543", "label": "CVE公式レコード" }, { "url": "https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/security/bulletin/2025-09-01", "label": "CVE掲載の参考情報" }, { "url": "https://source.android.com/docs/security/bulletin/2025-09-01", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48543", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/48xxx/CVE-2025-48543.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"Google\",\"product\":\"Android\",\"versions\":[{\"version\":\"16\",\"status\":\"affected\"},{\"version\":\"15\",\"status\":\"affected\"},{\"version\":\"14\",\"status\":\"affected\"},{\"version\":\"13\",\"status\":\"affected\"}],\"defaultStatus\":\"unaffected\"}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-48543", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-48543\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-48543（Android）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は追加の実行権限を必要としません。\n・攻撃の実行にユーザー操作は不要です。\n・Chrome のサンドボックスから Android の system_server へエスケープできる条件が存在します。\n・公式の対象表：Google / Android。影響ありとして記載：16。影響ありとして記載：15。影響ありとして記載：14。影響ありとして記載：13。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-48543", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:58.694Z", "lastSuccess": "2026-10-24T04:41:58.694Z", "sourceCheckedAt": "2026-10-24T04:41:58.694Z", "errorCode": null }, "glossary": [ { "term": "権限昇格", "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-53690", "aliases": [], "title": "Experience Manager (XM) / Experience Platform (XP)：脆弱性情報", "summary": "Sitecore Experience Manager (XM)、Experience Platform (XP)、Experience Commerce (XC)、および Managed Cloud において、デフォルトの ASP.NET マシンキーが使用されているため、信頼できないデータのデシリアライズが可能となり、コードインジェクションが実行できる脆弱性が存在します。", "risk": "この脆弱性を利用されると、攻撃者はリモートでコードを実行でき、サーバー上で任意の処理を行わせられる可能性があります。", "product": "Experience Manager (XM) / Experience Platform (XP)", "category": "other", "component": "package", "severity": "critical", "cvss": 9, "cvssVersion": "3.1", "cvssSource": "Wiz", "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "affected": [ { "product": "Experience Manager (XM)", "range": "<= 9.0" }, { "product": "Experience Platform (XP)", "range": "<= 9.0" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "label": "CVE：Wiz" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-53690", "label": "CVE公式レコード" }, { "url": "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "label": "CVE掲載の参考情報" }, { "url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53690", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-09-03T20:04:48.223Z", "modifiedAt": "2026-02-26T17:49:44.363Z", "fetchedAt": "2026-10-24T04:41:59.541Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.", "sourceTitle": "Sitecore Products ViewState Deserialization Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Experience Manager (XM)", "vendor": "Sitecore", "versions": [ { "lessThanOrEqual": "9.0", "status": "affected", "version": "0", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "Experience Platform (XP)", "vendor": "Sitecore", "versions": [ { "lessThanOrEqual": "9.0", "status": "affected", "version": "0", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-53690", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "fetchedAt": "2026-10-24T04:41:59.541Z", "publishedAt": "2025-09-03T20:04:48.223Z", "modifiedAt": "2026-02-26T17:49:44.363Z", "state": "published", "provider": "Wiz", "title": "Sitecore Products ViewState Deserialization Vulnerability", "descriptions": [ { "lang": "en", "value": "Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Sitecore", "product": "Experience Manager (XM)", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThanOrEqual": "9.0", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Sitecore", "product": "Experience Platform (XP)", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThanOrEqual": "9.0", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-502", "lang": "en", "description": "CWE-502 Deserialization of Untrusted Data", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9, "baseSeverity": "CRITICAL", "provider": "Wiz", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "label": "Wiz", "tags": [], "provider": "Wiz", "sourcePath": "/containers/cna/references/0" }, { "url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "label": "Wiz", "tags": [], "provider": "Wiz", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53690", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Experience Manager (XM)\",\"vendor\":\"Sitecore\",\"versions\":[{\"lessThanOrEqual\":\"9.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Experience Platform (XP)\",\"vendor\":\"Sitecore\",\"versions\":[{\"lessThanOrEqual\":\"9.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-502\",\"description\":\"CWE-502 Deserialization of Untrusted Data\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"attackComplexity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9,\"baseSeverity\":\"CRITICAL\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"scope\":\"CHANGED\",\"userInteraction\":\"NONE\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\",\"version\":\"3.1\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-53690:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "sourcePath": "retained:/originalText", "text": "Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-53690:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:49:44.363Z", "fetchedAt": "2026-10-24T04:41:59.541Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-04T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Experience Manager (XM) / Experience Platform (XP)に脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:41:59.541Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "e18e21366085f50822d6a6c1cf53fc88c1bbb62290e90850e7e9bdbe516c250f", "sourceModifiedAt": "2026-02-26T17:49:44.363Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Sitecore Experience Manager (XM)、Experience Platform (XP)、Experience Commerce (XC)、および Managed Cloud において、デフォルトの ASP.NET マシンキーが使用されているため、信頼できないデータのデシリアライズが可能となり、コードインジェクションが実行できる脆弱性が存在します。", "risk": "この脆弱性を利用されると、攻撃者はリモートでコードを実行でき、サーバー上で任意の処理を行わせられる可能性があります。", "summaryEvidenceIds": [ "E1", "E2", "E3" ], "riskEvidenceIds": [ "E2" ], "applicability": [ { "text": "Experience Manager (XM) のバージョン 9.0 までが影響対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E4", "E3" ] }, { "text": "Experience Platform (XP) のバージョン 9.0 までが影響対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E5", "E3" ] }, { "text": "Experience Commerce (XC) が影響対象です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "Managed Cloud が影響対象です。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E2", "E3" ] }, { "text": "公式の対象表：Sitecore / Experience Manager (XM)。影響ありとして記載：9.0以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：Sitecore / Experience Platform (XP)。影響ありとして記載：9.0以下の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Experience Manager (XM) / Experience Platform (XP)」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-53690", "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "https://nvd.nist.gov/vuln/detail/CVE-2025-53690" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-53690", "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "https://nvd.nist.gov/vuln/detail/CVE-2025-53690" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-53690", "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "https://nvd.nist.gov/vuln/detail/CVE-2025-53690" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "label": "CVE：Wiz" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-53690", "label": "CVE公式レコード" }, { "url": "https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability", "label": "CVE掲載の参考情報" }, { "url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-53690", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "sourceField": "retained:/originalText", "excerpt": "Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud contain a deserialization of untrusted data vulnerability involving the use of default machine keys. This flaw allows attackers to exploit exposed ASP.NET machine keys to achieve remote code execution.", "language": "en", "representation": "retained_feed_field" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourceField": "/containers/cna/title", "excerpt": "Sitecore Products ViewState Deserialization Vulnerability", "language": null }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Experience Manager (XM)\",\"vendor\":\"Sitecore\",\"versions\":[{\"lessThanOrEqual\":\"9.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/53xxx/CVE-2025-53690.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Experience Platform (XP)\",\"vendor\":\"Sitecore\",\"versions\":[{\"lessThanOrEqual\":\"9.0\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-53690", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-53690\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-53690（Experience Manager (XM) / Experience Platform (XP)）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・Experience Manager (XM) のバージョン 9.0 までが影響対象です。\n・Experience Platform (XP) のバージョン 9.0 までが影響対象です。\n・Experience Commerce (XC) が影響対象です。\n・Managed Cloud が影響対象です。\n・公式の対象表：Sitecore / Experience Manager (XM)。影響ありとして記載：9.0以下の版。\n・公式の対象表：Sitecore / Experience Platform (XP)。影響ありとして記載：9.0以下の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-53690", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:41:59.541Z", "lastSuccess": "2026-10-24T04:41:59.541Z", "sourceCheckedAt": "2026-10-24T04:41:59.541Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2023-50224", "aliases": [], "title": "TL-WR841N / TL-WR841ND / TL-MR6400 / Archer C5 / Archer C7 / TL-WDR3600 / TL-WDR4300 / TL-WDR3500 / TL-WR740N / TL-WR741ND / TL-WR749N / TL-MR3420 / TL-WR1043ND / TL-WR1045ND / TL-WR840N / TL-WR842N / TL-WR842ND / TL-WR845N / TL-WR941ND / TL-WR945N /：情報の漏えい", "summary": "TP-Link の TL-WR841N などのルーターに搭載されている httpd サービス（デフォルトで TCP ポート 80）に認証の欠如があり、ネットワークに近接した攻撃者が認証なしでアクセスでき、保存された認証情報が漏洩する脆弱性です。", "risk": "攻撃者は漏洩した認証情報を利用して、ルーターへの不正アクセスやさらなる侵害を行う可能性があります。", "product": "TL-WR841N / TL-WR841ND / TL-MR6400 / Archer C5 / Archer C7 / TL-WDR3600 / TL-WDR4300 / TL-WDR3500 / TL-WR740N / TL-WR741ND / TL-WR749N / TL-MR3420 / TL-WR1043ND / TL-WR1045ND / TL-WR840N / TL-WR842N / TL-WR842ND / TL-WR845N / TL-WR941ND / TL-WR945N /", "category": "other", "component": "package", "severity": "medium", "cvss": 6.5, "cvssVersion": "3.1", "cvssSource": "zdi", "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "affected": [ { "product": "TL-WR841N", "range": "3.16.9 build 200409" }, { "product": "TL-WR841N", "range": "V8" }, { "product": "TL-WR841N", "range": "V9" }, { "product": "TL-WR841N", "range": "V10" }, { "product": "TL-WR841N", "range": "V11" }, { "product": "TL-WR841N", "range": "V12" }, { "product": "TL-WR841N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR841ND", "range": "V8" }, { "product": "TL-WR841ND", "range": "V9" }, { "product": "TL-WR841ND", "range": "V10" }, { "product": "TL-WR841ND", "range": "V11" }, { "product": "TL-WR841ND", "range": "V12" }, { "product": "TL-WR841ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-MR6400", "range": "V1" }, { "product": "TL-MR6400", "range": "V2" }, { "product": "TL-MR6400", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Archer C5", "range": "V2" }, { "product": "Archer C5", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "Archer C7", "range": "V2" }, { "product": "Archer C7", "range": "V3" }, { "product": "Archer C7", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WDR3600", "range": "V2" }, { "product": "TL-WDR3600", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WDR4300", "range": "V1" }, { "product": "TL-WDR4300", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WDR3500", "range": "V2" }, { "product": "TL-WDR3500", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR740N", "range": "V4" }, { "product": "TL-WR740N", "range": "V5" }, { "product": "TL-WR740N", "range": "V6" }, { "product": "TL-WR740N", "range": "V7" }, { "product": "TL-WR740N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR741ND", "range": "V4" }, { "product": "TL-WR741ND", "range": "V5" }, { "product": "TL-WR741ND", "range": "V6" }, { "product": "TL-WR741ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR749N", "range": "BR 6.0" }, { "product": "TL-WR749N", "range": "BR 7.0" }, { "product": "TL-WR749N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-MR3420", "range": "V2" }, { "product": "TL-MR3420", "range": "V3" }, { "product": "TL-MR3420", "range": "V4" }, { "product": "TL-MR3420", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR1043ND", "range": "V2" }, { "product": "TL-WR1043ND", "range": "V3" }, { "product": "TL-WR1043ND", "range": "V4" }, { "product": "TL-WR1043ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR1045ND", "range": "RU V2" }, { "product": "TL-WR1045ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR840N", "range": "V2" }, { "product": "TL-WR840N", "range": "V3" }, { "product": "TL-WR840N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR842N", "range": "V2" }, { "product": "TL-WR842N", "range": "V3" }, { "product": "TL-WR842N", "range": "V4" }, { "product": "TL-WR842N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR842ND", "range": "V2" }, { "product": "TL-WR842ND", "range": "V3" }, { "product": "TL-WR842ND", "range": "V4" }, { "product": "TL-WR842ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR845N", "range": "V1" }, { "product": "TL-WR845N", "range": "V2" }, { "product": "TL-WR845N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR941ND", "range": "V5" }, { "product": "TL-WR941ND", "range": "V6" }, { "product": "TL-WR941ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WR945N", "range": "V1" }, { "product": "TL-WR945N", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WA801ND", "range": "V3" }, { "product": "TL-WA801ND", "range": "V4" }, { "product": "TL-WA801ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" }, { "product": "TL-WA901ND", "range": "V3" }, { "product": "TL-WA901ND", "range": "V4" }, { "product": "TL-WA901ND", "range": "V5" }, { "product": "TL-WA901ND", "range": "原典の既定状態: 影響あり。個別指定外の版は例外・条件を原文で確認してください。" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "label": "CVE：zdi" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-50224", "label": "CVE公式レコード" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "label": "ZDI-23-1808" }, { "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "label": "vendor-provided URL" }, { "url": "https://www.tp-link.com/us/support/faq/5058/", "label": "vendor-advisory" }, { "url": "https://www.tp-link.com/us/support/faq/4308/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50224", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-05-03T02:14:42.922Z", "modifiedAt": "2026-09-02T17:58:31.299Z", "fetchedAt": "2026-10-24T08:01:53.703Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.", "sourceTitle": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "TP-Link", "product": "TL-WR841N", "versions": [ { "status": "affected", "version": "3.16.9 build 200409", "versionType": "custom" }, { "status": "affected", "version": "V8", "versionType": "custom" }, { "status": "affected", "version": "V9", "versionType": "custom" }, { "status": "affected", "version": "V10", "versionType": "custom" }, { "status": "affected", "version": "V11", "versionType": "custom" }, { "status": "unaffected", "version": "V11_211209", "versionType": "custom" }, { "status": "affected", "version": "V12", "versionType": "custom" }, { "status": "unaffected", "version": "V12_230317", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR841ND", "versions": [ { "status": "affected", "version": "V8", "versionType": "custom" }, { "status": "affected", "version": "V9", "versionType": "custom" }, { "status": "affected", "version": "V10", "versionType": "custom" }, { "status": "affected", "version": "V11", "versionType": "custom" }, { "status": "unaffected", "version": "V11_211209", "versionType": "custom" }, { "status": "affected", "version": "V12", "versionType": "custom" }, { "status": "unaffected", "version": "V12_230317", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-MR6400", "versions": [ { "status": "affected", "version": "V1", "versionType": "custom" }, { "status": "affected", "version": "V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "Archer C5", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "Archer C7", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "unaffected", "version": "V2_241108", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WDR3600", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WDR4300", "versions": [ { "status": "affected", "version": "V1", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WDR3500", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR740N", "versions": [ { "status": "affected", "version": "V4", "versionType": "custom" }, { "status": "affected", "version": "V5", "versionType": "custom" }, { "status": "affected", "version": "V6", "versionType": "custom" }, { "status": "affected", "version": "V7", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR741ND", "versions": [ { "status": "affected", "version": "V4", "versionType": "custom" }, { "status": "affected", "version": "V5", "versionType": "custom" }, { "status": "affected", "version": "V6", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR749N", "versions": [ { "status": "affected", "version": "BR 6.0", "versionType": "custom" }, { "status": "affected", "version": "BR 7.0", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-MR3420", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR1043ND", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR1045ND", "versions": [ { "status": "affected", "version": "RU V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR840N", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR842N", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR842ND", "versions": [ { "status": "affected", "version": "V2", "versionType": "custom" }, { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR845N", "versions": [ { "status": "affected", "version": "V1", "versionType": "custom" }, { "status": "affected", "version": "V2", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR941ND", "versions": [ { "status": "affected", "version": "V5", "versionType": "custom" }, { "status": "affected", "version": "V6", "versionType": "custom" }, { "status": "unaffected", "version": "V6_220610", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WR945N", "versions": [ { "status": "affected", "version": "V1", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WA801ND", "versions": [ { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" } ], "defaultStatus": "affected" }, { "vendor": "TP-Link", "product": "TL-WA901ND", "versions": [ { "status": "affected", "version": "V3", "versionType": "custom" }, { "status": "affected", "version": "V4", "versionType": "custom" }, { "status": "unaffected", "version": "V4_201030", "versionType": "custom" }, { "status": "affected", "version": "V5", "versionType": "custom" }, { "status": "unaffected", "version": "V5_201030", "versionType": "custom" } ], "defaultStatus": "affected" } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2023-50224", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "fetchedAt": "2026-10-24T08:01:53.703Z", "publishedAt": "2024-05-03T02:14:42.922Z", "modifiedAt": "2026-09-02T17:58:31.299Z", "state": "published", "provider": "zdi", "title": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability", "descriptions": [ { "lang": "en", "value": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "TP-Link", "product": "TL-WR841N", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "3.16.9 build 200409", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "V8", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "V9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "V10", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/4", "version": "V11", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/5", "version": "V11_211209", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/0/versions/6", "version": "V12", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/7", "version": "V12_230317", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "TP-Link", "product": "TL-WR841ND", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "V8", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "V9", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "V10", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "V11", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/4", "version": "V11_211209", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/1/versions/5", "version": "V12", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/6", "version": "V12_230317", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "TP-Link", "product": "TL-MR6400", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "V1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/2/versions/1", "version": "V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "Archer C5", "sourcePath": "/containers/cna/affected/3", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/3/versions/0", "version": "V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "Archer C7", "sourcePath": "/containers/cna/affected/4", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/4/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/4/versions/1", "version": "V2_241108", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/4/versions/2", "version": "V3", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WDR3600", "sourcePath": "/containers/cna/affected/5", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/5/versions/0", "version": "V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WDR4300", "sourcePath": "/containers/cna/affected/6", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/6/versions/0", "version": "V1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WDR3500", "sourcePath": "/containers/cna/affected/7", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/7/versions/0", "version": "V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR740N", "sourcePath": "/containers/cna/affected/8", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/8/versions/0", "version": "V4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/8/versions/1", "version": "V5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/8/versions/2", "version": "V6", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/8/versions/3", "version": "V7", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR741ND", "sourcePath": "/containers/cna/affected/9", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/9/versions/0", "version": "V4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/9/versions/1", "version": "V5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/9/versions/2", "version": "V6", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR749N", "sourcePath": "/containers/cna/affected/10", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/10/versions/0", "version": "BR 6.0", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/10/versions/1", "version": "BR 7.0", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-MR3420", "sourcePath": "/containers/cna/affected/11", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/11/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/11/versions/1", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/11/versions/2", "version": "V4", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR1043ND", "sourcePath": "/containers/cna/affected/12", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/12/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/12/versions/1", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/12/versions/2", "version": "V4", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR1045ND", "sourcePath": "/containers/cna/affected/13", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/13/versions/0", "version": "RU V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR840N", "sourcePath": "/containers/cna/affected/14", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/14/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/14/versions/1", "version": "V3", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR842N", "sourcePath": "/containers/cna/affected/15", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/15/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/15/versions/1", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/15/versions/2", "version": "V4", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR842ND", "sourcePath": "/containers/cna/affected/16", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/16/versions/0", "version": "V2", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/16/versions/1", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/16/versions/2", "version": "V4", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR845N", "sourcePath": "/containers/cna/affected/17", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/17/versions/0", "version": "V1", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/17/versions/1", "version": "V2", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WR941ND", "sourcePath": "/containers/cna/affected/18", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/18/versions/0", "version": "V5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/18/versions/1", "version": "V6", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/18/versions/2", "version": "V6_220610", "versionType": "custom", "status": "unaffected" } ] }, { "vendor": "TP-Link", "product": "TL-WR945N", "sourcePath": "/containers/cna/affected/19", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/19/versions/0", "version": "V1", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WA801ND", "sourcePath": "/containers/cna/affected/20", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/20/versions/0", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/20/versions/1", "version": "V4", "versionType": "custom", "status": "affected" } ] }, { "vendor": "TP-Link", "product": "TL-WA901ND", "sourcePath": "/containers/cna/affected/21", "defaultStatus": "affected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/21/versions/0", "version": "V3", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/21/versions/1", "version": "V4", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/21/versions/2", "version": "V4_201030", "versionType": "custom", "status": "unaffected" }, { "sourcePath": "/containers/cna/affected/21/versions/3", "version": "V5", "versionType": "custom", "status": "affected" }, { "sourcePath": "/containers/cna/affected/21/versions/4", "version": "V5_201030", "versionType": "custom", "status": "unaffected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-290", "lang": "en", "description": "CWE-290: Authentication Bypass by Spoofing", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "provider": "zdi", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "label": "ZDI-23-1808", "tags": [ "x_research-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/0" }, { "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "label": "vendor-provided URL", "tags": [ "vendor-advisory", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/1/references/1" }, { "url": "https://www.tp-link.com/us/support/faq/5058/", "label": "vendor-advisory", "tags": [ "vendor-advisory" ], "provider": "zdi", "sourcePath": "/containers/cna/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-50224", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR841N\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.16.9 build 200409\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V8\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V9\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V10\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V11\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V11_211209\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V12\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V12_230317\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR841ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V8\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V9\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V10\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V11\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V11_211209\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V12\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V12_230317\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-MR6400\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/3", "text": "{\"vendor\":\"TP-Link\",\"product\":\"Archer C5\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/4", "text": "{\"vendor\":\"TP-Link\",\"product\":\"Archer C7\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V2_241108\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/5", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR3600\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/6", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR4300\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/7", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR3500\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/8", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR740N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V7\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/9", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR741ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/10", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR749N\",\"versions\":[{\"status\":\"affected\",\"version\":\"BR 6.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"BR 7.0\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/11", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-MR3420\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/12", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR1043ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/13", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR1045ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"RU V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/14", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR840N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/15", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR842N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/16", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR842ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/17", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR845N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/18", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR941ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V6_220610\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/19", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR945N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/20", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WA801ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/affected/21", "text": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WA901ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V4_201030\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V5_201030\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"lang\":\"en\",\"cweId\":\"CWE-290\",\"description\":\"CWE-290: Authentication Bypass by Spoofing\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseSeverity\":\"MEDIUM\",\"baseScore\":6.5,\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2023-50224:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "sourcePath": "retained:/originalText", "text": "TP-Link TL-WR841N contains an authentication bypass by spoofing vulnerability within the httpd service, which listens on TCP port 80 by default, leading to the disclose of stored credentials. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2023-50224:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "modifiedAt": "2025-09-03T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-09-02T17:58:31.299Z", "fetchedAt": "2026-10-24T08:01:53.703Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-03T00:00:00.000Z", "fetchedAt": "2026-10-24T07:17:50.339Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "TL-WR841N / TL-WR841ND / TL-MR6400 / Archer C5 / Archer C7 / TL-WDR3600 / TL-WDR4300 / TL-WDR3500 / TL-WR740N / TL-WR741ND / TL-WR749N / TL-MR3420 / TL-WR1043ND / TL-WR1045ND / TL-WR840N / TL-WR842N / TL-WR842ND / TL-WR845N / TL-WR941ND / TL-WR945N /に情報の漏えいに関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来公開しない情報を読み取られる可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T08:01:53.703Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "fb5c8e24cefef7368942ed9d36dca2a349b2a693ea350ef2273b0f231afc90f4", "sourceModifiedAt": "2026-09-02T17:58:31.299Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "TP-Link の TL-WR841N などのルーターに搭載されている httpd サービス（デフォルトで TCP ポート 80）に認証の欠如があり、ネットワークに近接した攻撃者が認証なしでアクセスでき、保存された認証情報が漏洩する脆弱性です。", "risk": "攻撃者は漏洩した認証情報を利用して、ルーターへの不正アクセスやさらなる侵害を行う可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "ネットワークに近接した攻撃者が認証なしで httpd サービス（ポート 80）に接続できる環境が対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：TP-Link / TL-WR841N。影響ありとして記載：3.16.9 build 200409。影響ありとして記載：V8。影響ありとして記載：V9。影響ありとして記載：V10。影響ありとして記載：V11。影響なしとして記載：V11_211209。影響ありとして記載：V12。影響なしとして記載：V12_230317。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：TP-Link / TL-WR841ND。影響ありとして記載：V8。影響ありとして記載：V9。影響ありとして記載：V10。影響ありとして記載：V11。影響なしとして記載：V11_211209。影響ありとして記載：V12。影響なしとして記載：V12_230317。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：TP-Link / TL-MR6400。影響ありとして記載：V1。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E5" ] }, { "text": "公式の対象表：TP-Link / Archer C5。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E6" ] }, { "text": "公式の対象表：TP-Link / Archer C7。影響ありとして記載：V2。影響なしとして記載：V2_241108。影響ありとして記載：V3。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E7" ] }, { "text": "公式の対象表：TP-Link / TL-WDR3600。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E8" ] }, { "text": "公式の対象表：TP-Link / TL-WDR4300。影響ありとして記載：V1。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E9" ] }, { "text": "公式の対象表：TP-Link / TL-WDR3500。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E10" ] }, { "text": "公式の対象表：TP-Link / TL-WR740N。影響ありとして記載：V4。影響ありとして記載：V5。影響ありとして記載：V6。影響ありとして記載：V7。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E11" ] }, { "text": "公式の対象表：TP-Link / TL-WR741ND。影響ありとして記載：V4。影響ありとして記載：V5。影響ありとして記載：V6。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E12" ] }, { "text": "公式の対象表：TP-Link / TL-WR749N。影響ありとして記載：BR 6.0。影響ありとして記載：BR 7.0。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E13" ] }, { "text": "公式の対象表：TP-Link / TL-MR3420。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E14" ] }, { "text": "公式の対象表：TP-Link / TL-WR1043ND。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E15" ] }, { "text": "公式の対象表：TP-Link / TL-WR1045ND。影響ありとして記載：RU V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E16" ] }, { "text": "公式の対象表：TP-Link / TL-WR840N。影響ありとして記載：V2。影響ありとして記載：V3。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E17" ] }, { "text": "公式の対象表：TP-Link / TL-WR842N。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E18" ] }, { "text": "公式の対象表：TP-Link / TL-WR842ND。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E19" ] }, { "text": "公式の対象表：TP-Link / TL-WR845N。影響ありとして記載：V1。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E20" ] }, { "text": "公式の対象表：TP-Link / TL-WR941ND。影響ありとして記載：V5。影響ありとして記載：V6。影響なしとして記載：V6_220610。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E21" ] }, { "text": "公式の対象表：TP-Link / TL-WR945N。影響ありとして記載：V1。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E22" ] }, { "text": "公式の対象表：TP-Link / TL-WA801ND。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E23" ] }, { "text": "公式の対象表：TP-Link / TL-WA901ND。影響ありとして記載：V3。影響ありとして記載：V4。影響なしとして記載：V4_201030。影響ありとして記載：V5。影響なしとして記載：V5_201030。個別に例外が記されていない版も、原資料では影響ありとされています。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E24" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224" ], "evidenceIds": [ "E25" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E3" ] }, { "text": "「TL-WR841N / TL-WR841ND / TL-MR6400 / Archer C5 / Archer C7 / TL-WDR3600 / TL-WDR4300 / TL-WDR3500 / TL-WR740N / TL-WR741ND / TL-WR749N / TL-MR3420 / TL-WR1043ND / TL-WR1045ND / TL-WR840N / TL-WR842N / TL-WR842ND / TL-WR845N / TL-WR941ND / TL-WR945N /」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-50224", "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "https://www.tp-link.com/us/support/faq/5058/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "https://www.tp-link.com/us/support/faq/4308/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50224" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2023-50224", "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "https://www.tp-link.com/us/support/faq/5058/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "https://www.tp-link.com/us/support/faq/4308/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50224" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2023-50224", "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "https://www.tp-link.com/us/support/faq/5058/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "https://www.tp-link.com/us/support/faq/4308/", "https://nvd.nist.gov/vuln/detail/CVE-2023-50224" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "label": "CVE：zdi" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2023-50224", "label": "CVE公式レコード" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-1808/", "label": "ZDI-23-1808" }, { "url": "https://www.tp-link.com/en/support/download/tl-wr841n/v12/#Firmware", "label": "vendor-provided URL" }, { "url": "https://www.tp-link.com/us/support/faq/5058/", "label": "vendor-advisory" }, { "url": "https://www.tp-link.com/us/support/faq/4308/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50224", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/title", "excerpt": "TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR841N\",\"versions\":[{\"status\":\"affected\",\"version\":\"3.16.9 build 200409\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V8\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V9\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V10\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V11\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V11_211209\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V12\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V12_230317\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR841ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V8\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V9\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V10\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V11\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V11_211209\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V12\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V12_230317\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-MR6400\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/3", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"Archer C5\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E7", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/4", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"Archer C7\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V2_241108\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E8", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/5", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR3600\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E9", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/6", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR4300\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E10", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/7", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WDR3500\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E11", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/8", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR740N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V7\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E12", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/9", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR741ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E13", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/10", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR749N\",\"versions\":[{\"status\":\"affected\",\"version\":\"BR 6.0\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"BR 7.0\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E14", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/11", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-MR3420\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E15", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/12", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR1043ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E16", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/13", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR1045ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"RU V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E17", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/14", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR840N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E18", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/15", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR842N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E19", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/16", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR842ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E20", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/17", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR845N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V2\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E21", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/18", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR941ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V6\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V6_220610\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E22", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/19", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WR945N\",\"versions\":[{\"status\":\"affected\",\"version\":\"V1\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E23", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/20", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WA801ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E24", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2023/50xxx/CVE-2023-50224.json", "sourceField": "/containers/cna/affected/21", "excerpt": "{\"vendor\":\"TP-Link\",\"product\":\"TL-WA901ND\",\"versions\":[{\"status\":\"affected\",\"version\":\"V3\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V4\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V4_201030\",\"versionType\":\"custom\"},{\"status\":\"affected\",\"version\":\"V5\",\"versionType\":\"custom\"},{\"status\":\"unaffected\",\"version\":\"V5_201030\",\"versionType\":\"custom\"}],\"defaultStatus\":\"affected\"}", "language": null, "representation": "source_json" }, { "id": "E25", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-50224", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2023-50224\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2023-50224（TL-WR841N / TL-WR841ND / TL-MR6400 / Archer C5 / Archer C7 / TL-WDR3600 / TL-WDR4300 / TL-WDR3500 / TL-WR740N / TL-WR741ND / TL-WR749N / TL-MR3420 / TL-WR1043ND / TL-WR1045ND / TL-WR840N / TL-WR842N / TL-WR842ND / TL-WR845N / TL-WR941ND / TL-WR945N /）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・ネットワークに近接した攻撃者が認証なしで httpd サービス（ポート 80）に接続できる環境が対象です。\n・公式の対象表：TP-Link / TL-WR841N。影響ありとして記載：3.16.9 build 200409。影響ありとして記載：V8。影響ありとして記載：V9。影響ありとして記載：V10。影響ありとして記載：V11。影響なしとして記載：V11_211209。影響ありとして記載：V12。影響なしとして記載：V12_230317。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR841ND。影響ありとして記載：V8。影響ありとして記載：V9。影響ありとして記載：V10。影響ありとして記載：V11。影響なしとして記載：V11_211209。影響ありとして記載：V12。影響なしとして記載：V12_230317。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-MR6400。影響ありとして記載：V1。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / Archer C5。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / Archer C7。影響ありとして記載：V2。影響なしとして記載：V2_241108。影響ありとして記載：V3。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WDR3600。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WDR4300。影響ありとして記載：V1。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WDR3500。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR740N。影響ありとして記載：V4。影響ありとして記載：V5。影響ありとして記載：V6。影響ありとして記載：V7。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR741ND。影響ありとして記載：V4。影響ありとして記載：V5。影響ありとして記載：V6。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR749N。影響ありとして記載：BR 6.0。影響ありとして記載：BR 7.0。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-MR3420。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR1043ND。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR1045ND。影響ありとして記載：RU V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR840N。影響ありとして記載：V2。影響ありとして記載：V3。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR842N。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR842ND。影響ありとして記載：V2。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR845N。影響ありとして記載：V1。影響ありとして記載：V2。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR941ND。影響ありとして記載：V5。影響ありとして記載：V6。影響なしとして記載：V6_220610。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WR945N。影響ありとして記載：V1。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WA801ND。影響ありとして記載：V3。影響ありとして記載：V4。個別に例外が記されていない版も、原資料では影響ありとされています。\n・公式の対象表：TP-Link / TL-WA901ND。影響ありとして記載：V3。影響ありとして記載：V4。影響なしとして記載：V4_201030。影響ありとして記載：V5。影響なしとして記載：V5_201030。個別に例外が記されていない版も、原資料では影響ありとされています。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2023-50224", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T08:01:53.703Z", "lastSuccess": "2026-10-24T08:01:53.703Z", "sourceCheckedAt": "2026-10-24T08:01:53.703Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-9377", "aliases": [], "title": "Archer C7(EU) V2 / TL-WR841N/ND(MS) V9：コード実行", "summary": "認証された攻撃者が Parental Control ページでコマンドインジェクションを利用し、TP‑Link Archer C7(EU) V2 および TL‑WR841N/ND(MS) V9 のデバイスに対してリモートでコードを実行できる脆弱性です。", "risk": "攻撃者はデバイス上で任意の OS コマンドを実行できる可能性があります。", "product": "Archer C7(EU) V2 / TL-WR841N/ND(MS) V9", "category": "other", "component": "package", "severity": "high", "cvss": 8.6, "cvssVersion": "4.0", "cvssSource": "TPLink", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "affected": [ { "product": "Archer C7(EU) V2", "range": "< 241108" }, { "product": "TL-WR841N/ND(MS) V9", "range": "< 241108" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "label": "CVE：TPLink" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-9377", "label": "CVE公式レコード" }, { "url": "https://www.tp-link.com/us/support/faq/4365/", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/us/support/faq/4308/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9377", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-08-29T17:30:33.700Z", "modifiedAt": "2026-02-26T17:47:46.853Z", "fetchedAt": "2026-10-24T04:42:05.495Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.\n\nThis issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.\n\nBoth products have reached the status of EOL (end-of-life).\nIt's recommending to \n\npurchase the new \nproduct to ensure better performance and security. If replacement is not\n an option in the short term, please use the second reference link to \ndownload and install the patch(es).", "sourceTitle": "Authenticated RCE via Parental Control command injection", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Archer C7(EU) V2", "vendor": "TP-Link Systems Inc.", "versions": [ { "lessThan": "241108", "status": "affected", "version": "0", "versionType": "date" } ] }, { "defaultStatus": "unaffected", "product": "TL-WR841N/ND(MS) V9", "vendor": "TP-Link Systems Inc.", "versions": [ { "lessThan": "241108", "status": "affected", "version": "0", "versionType": "date" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-9377", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "fetchedAt": "2026-10-24T04:42:05.495Z", "publishedAt": "2025-08-29T17:30:33.700Z", "modifiedAt": "2026-02-26T17:47:46.853Z", "state": "published", "provider": "TPLink", "title": "Authenticated RCE via Parental Control command injection", "descriptions": [ { "lang": "en", "value": "The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.\n\nThis issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.\n\nBoth products have reached the status of EOL (end-of-life).\nIt's recommending to \n\npurchase the new \nproduct to ensure better performance and security. If replacement is not\n an option in the short term, please use the second reference link to \ndownload and install the patch(es).", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "TP-Link Systems Inc.", "product": "Archer C7(EU) V2", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "0", "lessThan": "241108", "versionType": "date", "status": "affected" } ] }, { "vendor": "TP-Link Systems Inc.", "product": "TL-WR841N/ND(MS) V9", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "0", "lessThan": "241108", "versionType": "date", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-78", "lang": "en", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "baseScore": 8.6, "baseSeverity": "HIGH", "provider": "TPLink", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://www.tp-link.com/us/support/faq/4365/", "label": "TPLink", "tags": [ "vendor-advisory" ], "provider": "TPLink", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.tp-link.com/us/support/faq/4308/", "label": "TPLink", "tags": [ "patch", "vendor-advisory" ], "provider": "TPLink", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-9377", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Archer C7(EU) V2\",\"vendor\":\"TP-Link Systems Inc.\",\"versions\":[{\"lessThan\":\"241108\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"date\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"TL-WR841N/ND(MS) V9\",\"vendor\":\"TP-Link Systems Inc.\",\"versions\":[{\"lessThan\":\"241108\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"date\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.\n\nThis issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.\n\nBoth products have reached the status of EOL (end-of-life).\nIt's recommending to \n\npurchase the new \nproduct to ensure better performance and security. If replacement is not\n an option in the short term, please use the second reference link to \ndownload and install the patch(es).", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-78\",\"description\":\"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"NETWORK\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"privilegesRequired\":\"HIGH\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-9377:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "sourcePath": "retained:/originalText", "text": "TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-9377:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "modifiedAt": "2025-09-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:47:46.853Z", "fetchedAt": "2026-10-24T04:42:05.495Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-03T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Archer C7(EU) V2 / TL-WR841N/ND(MS) V9にコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:42:05.495Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "05b7554bcc22b4fe42e1050ac351607efdea01a50f3c545351e63fc6cbdc729e", "sourceModifiedAt": "2026-02-26T17:47:46.853Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "認証された攻撃者が Parental Control ページでコマンドインジェクションを利用し、TP‑Link Archer C7(EU) V2 および TL‑WR841N/ND(MS) V9 のデバイスに対してリモートでコードを実行できる脆弱性です。", "risk": "攻撃者はデバイス上で任意の OS コマンドを実行できる可能性があります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は認証済みである必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "対象は Parental Control ページです。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "製品は TP‑Link Archer C7(EU) V2 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "Archer C7(EU) V2 のバージョンが 2024‑11‑08（241108）以前であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E3", "E2" ] }, { "text": "製品は TP‑Link TL‑WR841N/ND(MS) V9 です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "TL‑WR841N/ND(MS) V9 のバージョンが 2024‑11‑08（241108）以前であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E4", "E2" ] }, { "text": "両製品はすでに EOL（エンド・オブ・ライフ）状態です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：TP-Link Systems Inc. / Archer C7(EU) V2。影響ありとして記載：241108未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：TP-Link Systems Inc. / TL-WR841N/ND(MS) V9。影響ありとして記載：241108未満の版。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E3" ] }, { "text": "「Archer C7(EU) V2 / TL-WR841N/ND(MS) V9」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-9377", "https://www.tp-link.com/us/support/faq/4365/", "https://www.tp-link.com/us/support/faq/4308/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "https://nvd.nist.gov/vuln/detail/CVE-2025-9377" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "新しい製品を購入して性能とセキュリティを確保することが推奨されます。短期的に置き換えが難しい場合は、提供された別の参照リンクからパッチをダウンロードして適用してください。", "kind": "fix", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E1" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-9377", "https://www.tp-link.com/us/support/faq/4365/", "https://www.tp-link.com/us/support/faq/4308/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "https://nvd.nist.gov/vuln/detail/CVE-2025-9377" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "label": "CVE：TPLink" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-9377", "label": "CVE公式レコード" }, { "url": "https://www.tp-link.com/us/support/faq/4365/", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/us/support/faq/4308/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-9377", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "The authenticated remote command execution (RCE) vulnerability exists in the Parental Control page on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9.\n\nThis issue affects Archer C7(EU) V2: before 241108 and TL-WR841N/ND(MS) V9: before 241108.\n\nBoth products have reached the status of EOL (end-of-life).\nIt's recommending to \n\npurchase the new \nproduct to ensure better performance and security. If replacement is not\n an option in the short term, please use the second reference link to \ndownload and install the patch(es).", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourceField": "/containers/cna/title", "excerpt": "Authenticated RCE via Parental Control command injection", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Archer C7(EU) V2\",\"vendor\":\"TP-Link Systems Inc.\",\"versions\":[{\"lessThan\":\"241108\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"date\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/9xxx/CVE-2025-9377.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"TL-WR841N/ND(MS) V9\",\"vendor\":\"TP-Link Systems Inc.\",\"versions\":[{\"lessThan\":\"241108\",\"status\":\"affected\",\"version\":\"0\",\"versionType\":\"date\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-9377", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-9377\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-9377（Archer C7(EU) V2 / TL-WR841N/ND(MS) V9）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は認証済みである必要があります。\n・対象は Parental Control ページです。\n・製品は TP‑Link Archer C7(EU) V2 です。\n・Archer C7(EU) V2 のバージョンが 2024‑11‑08（241108）以前であること。\n・製品は TP‑Link TL‑WR841N/ND(MS) V9 です。\n・TL‑WR841N/ND(MS) V9 のバージョンが 2024‑11‑08（241108）以前であること。\n・両製品はすでに EOL（エンド・オブ・ライフ）状態です。\n・公式の対象表：TP-Link Systems Inc. / Archer C7(EU) V2。影響ありとして記載：241108未満の版。\n・公式の対象表：TP-Link Systems Inc. / TL-WR841N/ND(MS) V9。影響ありとして記載：241108未満の版。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-9377", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:42:05.495Z", "lastSuccess": "2026-10-24T04:42:05.495Z", "sourceCheckedAt": "2026-10-24T04:42:05.495Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2020-24363", "aliases": [], "title": "n/a：脆弱性情報", "summary": "TP-Link TL-WA855RE V5 20200415-rel37464 デバイスでは、同一ネットワーク上の認証されていない攻撃者が TDDP_RESET POST リクエストを送信して工場出荷時リセットと再起動を実行でき、その後新しい管理者パスワードを設定してアクセス制御を不正に取得できる。", "risk": "攻撃者は新しい管理者パスワードを設定することで、デバイスの管理権限を取得できる。", "product": "TP-Link TL-WA855RE", "category": "other", "component": "package", "severity": "unknown", "cvss": null, "cvssVersion": null, "cvssSource": "mitre", "cvssVector": null, "affected": [ { "product": "n/a", "range": "n/a" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-24363", "label": "CVE公式レコード" }, { "url": "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "label": "CVE掲載の参考情報" }, { "url": "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "label": "CVE掲載の参考情報" }, { "url": "https://pastebin.com/VjHM4UiA", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview", "label": "CISAが示す関連情報" }, { "url": "https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-24363", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2020-08-31T15:49:15.000Z", "modifiedAt": "2025-10-21T23:35:37.336Z", "fetchedAt": "2026-10-24T06:02:44.798Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2020-24363", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "fetchedAt": "2026-10-24T06:02:44.798Z", "publishedAt": "2020-08-31T15:49:15.000Z", "modifiedAt": "2025-10-21T23:35:37.336Z", "state": "published", "provider": "mitre", "title": "", "descriptions": [ { "lang": "en", "value": "TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "n/a", "product": "n/a", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "n/a", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "n/a", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 8.8, "baseSeverity": "HIGH", "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/0" }, { "url": "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/1" }, { "url": "https://pastebin.com/VjHM4UiA", "label": "CVE", "tags": [ "x_refsource_MISC", "x_transferred" ], "provider": "CVE", "sourcePath": "/containers/adp/0/references/2" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-24363", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/1/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"n/a\",\"lang\":\"en\",\"type\":\"text\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/adp/1/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourcePath": "/containers/adp/1/metrics/0/cvssV3_1", "text": "{\"scope\":\"UNCHANGED\",\"version\":\"3.1\",\"baseScore\":8.8,\"attackVector\":\"ADJACENT_NETWORK\",\"baseSeverity\":\"HIGH\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"integrityImpact\":\"HIGH\",\"userInteraction\":\"NONE\",\"attackComplexity\":\"LOW\",\"availabilityImpact\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"confidentialityImpact\":\"HIGH\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2020-24363:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "sourcePath": "retained:/originalText", "text": "TP-link TL-WA855RE contains a missing authentication for critical function vulnerability. This vulnerability could allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2020-24363:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "modifiedAt": "2025-09-02T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T23:35:37.336Z", "fetchedAt": "2026-10-24T06:02:44.798Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-02T00:00:00.000Z", "fetchedAt": "2026-10-24T05:17:49.363Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "n/aに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T06:02:44.798Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "904b332df0441fdf6c6d60aa5a81b897cb0c69b37ba73c874b8c5d7504b78f4e", "sourceModifiedAt": "2025-10-21T23:35:37.336Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "TP-Link TL-WA855RE V5 20200415-rel37464 デバイスでは、同一ネットワーク上の認証されていない攻撃者が TDDP_RESET POST リクエストを送信して工場出荷時リセットと再起動を実行でき、その後新しい管理者パスワードを設定してアクセス制御を不正に取得できる。", "risk": "攻撃者は新しい管理者パスワードを設定することで、デバイスの管理権限を取得できる。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "認証されていない攻撃者が同一ネットワーク上にいること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E1" ] }, { "text": "攻撃者が TDDP_RESET POST リクエストを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E1" ] }, { "text": "デバイスが工場出荷時リセットと再起動を受け付けること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E2" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363" ], "evidenceIds": [ "E3" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E2" ] }, { "text": "「TP-Link TL-WA855RE」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-24363", "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "https://pastebin.com/VjHM4UiA", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview", "https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs", "https://nvd.nist.gov/vuln/detail/CVE-2020-24363" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2020-24363", "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "https://pastebin.com/VjHM4UiA", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview", "https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs", "https://nvd.nist.gov/vuln/detail/CVE-2020-24363" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2020-24363", "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "https://pastebin.com/VjHM4UiA", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview", "https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs", "https://nvd.nist.gov/vuln/detail/CVE-2020-24363" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "label": "CVE：mitre" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2020-24363", "label": "CVE公式レコード" }, { "url": "https://www.tp-link.com/us/support/download/tl-wa855re/#Firmware", "label": "CVE掲載の参考情報" }, { "url": "http://malwrforensics.com/en/2020/08/31/cve-2020-24363-tl-wa855re-v5-advisory/", "label": "CVE掲載の参考情報" }, { "url": "https://pastebin.com/VjHM4UiA", "label": "CVE掲載の参考情報" }, { "url": "https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview", "label": "CISAが示す関連情報" }, { "url": "https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-24363", "label": "CISAが示す関連情報" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2020/24xxx/CVE-2020-24363.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"product\":\"n/a\",\"vendor\":\"n/a\",\"versions\":[{\"status\":\"affected\",\"version\":\"n/a\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-24363", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2020-24363\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2020-24363（TP-Link TL-WA855RE）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・認証されていない攻撃者が同一ネットワーク上にいること。\n・攻撃者が TDDP_RESET POST リクエストを送信できること。\n・デバイスが工場出荷時リセットと再起動を受け付けること。\n・公式の対象表：対象製品（この表に製品名の明記なし）。影響ありとして記載：具体的な版番号の記載なし。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2020-24363", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T06:02:44.798Z", "lastSuccess": "2026-10-24T06:02:44.798Z", "sourceCheckedAt": "2026-10-24T06:02:44.798Z", "errorCode": null }, "glossary": [ { "term": "POST", "meaning": "フォームなどのデータを、相手のサーバーへ送るための通信方法です。この言葉だけで、情報漏えいや設定変更が起きたと判断するものではありません。", "sourceUrl": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Methods/POST", "kind": "general_definition" } ] } }, { "id": "CVE-2025-55177", "aliases": [], "title": "WhatsApp Desktop for Mac / WhatsApp Business for iOS / WhatsApp for iOS：脆弱性情報", "summary": "WhatsApp for iOS（バージョン 2.25.21.73 未満）、WhatsApp Business for iOS（バージョン 2.25.21.78 未満）、WhatsApp Desktop for Mac（バージョン 2.25.21.78 未満）において、リンクデバイス同期メッセージの認可が不完全であり、無関係なユーザーが任意の URL のコンテンツ処理を対象デバイスでトリガーできる可能性があります。", "risk": "任意の URL のコンテンツがデバイス上で処理される可能性があります。", "product": "WhatsApp Desktop for Mac / WhatsApp Business for iOS / WhatsApp for iOS", "category": "other", "component": "package", "severity": "medium", "cvss": 5.4, "cvssVersion": "3.1", "cvssSource": "facebook", "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C", "affected": [ { "product": "WhatsApp Desktop for Mac", "range": ">= 2.22.25.2 / < 2.25.21.78" }, { "product": "WhatsApp Business for iOS", "range": ">= 2.22.25.2 / < 2.25.21.78" }, { "product": "WhatsApp for iOS", "range": ">= 2.22.25.2 / < 2.25.21.73" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "label": "CVE：facebook" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-55177", "label": "CVE公式レコード" }, { "url": "https://www.facebook.com/security/advisories/cve-2025-55177", "label": "CVE掲載の参考情報" }, { "url": "https://www.whatsapp.com/security/advisories/2025/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55177", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-08-29T15:50:28.578Z", "modifiedAt": "2026-10-07T17:57:35.015Z", "fetchedAt": "2026-10-24T04:42:11.628Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.", "sourceTitle": "", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "WhatsApp Desktop for Mac", "vendor": "Facebook", "versions": [ { "lessThan": "2.25.21.78", "status": "affected", "version": "2.22.25.2", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "WhatsApp Business for iOS", "vendor": "Facebook", "versions": [ { "lessThan": "2.25.21.78", "status": "affected", "version": "2.22.25.2", "versionType": "semver" } ] }, { "defaultStatus": "unaffected", "product": "WhatsApp for iOS", "vendor": "Facebook", "versions": [ { "lessThan": "2.25.21.73", "status": "affected", "version": "2.22.25.2", "versionType": "semver" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-55177", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "fetchedAt": "2026-10-24T04:42:11.628Z", "publishedAt": "2025-08-29T15:50:28.578Z", "modifiedAt": "2026-10-07T17:57:35.015Z", "state": "published", "provider": "facebook", "title": "", "descriptions": [ { "lang": "en", "value": "Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Facebook", "product": "WhatsApp Desktop for Mac", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2.22.25.2", "lessThan": "2.25.21.78", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Facebook", "product": "WhatsApp Business for iOS", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "2.22.25.2", "lessThan": "2.25.21.78", "versionType": "semver", "status": "affected" } ] }, { "vendor": "Facebook", "product": "WhatsApp for iOS", "sourcePath": "/containers/cna/affected/2", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/2/versions/0", "version": "2.22.25.2", "lessThan": "2.25.21.73", "versionType": "semver", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "", "lang": "en", "description": "Incorrect Authorization (CWE-863)", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C", "baseScore": 5.4, "baseSeverity": "MEDIUM", "provider": "facebook", "sourcePath": "/containers/cna/metrics/0/cvssV3_1" } ], "references": [ { "url": "https://www.facebook.com/security/advisories/cve-2025-55177", "label": "facebook", "tags": [ "x_refsource_CONFIRM" ], "provider": "facebook", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.whatsapp.com/security/advisories/2025/", "label": "facebook", "tags": [ "x_refsource_CONFIRM" ], "provider": "facebook", "sourcePath": "/containers/cna/references/1" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-55177", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp Desktop for Mac\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.78\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp Business for iOS\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.78\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/affected/2", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp for iOS\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.73\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"description\":\"Incorrect Authorization (CWE-863)\",\"lang\":\"en\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV3_1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourcePath": "/containers/cna/metrics/0/cvssV3_1", "text": "{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-55177:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "sourcePath": "retained:/originalText", "text": "Meta Platforms WhatsApp contains an incorrect authorization vulnerability due to an incomplete authorization of linked device synchronization messages. This vulnerability could allow an unrelated user to trigger processing of content from an arbitrary URL on a target’s device.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-55177:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "modifiedAt": "2025-09-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-10-07T17:57:35.015Z", "fetchedAt": "2026-10-24T04:42:11.628Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-09-02T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "WhatsApp Desktop for Mac / WhatsApp Business for iOS / WhatsApp for iOSに脆弱性情報に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "影響と攻撃の成立条件は、リンク先の公式情報で確認してください。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:42:11.628Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "610ad7f15ea0e6a13128df80ec4a705515837c35b7ad2effb1bd0c16b0f3f91c", "sourceModifiedAt": "2026-10-07T17:57:35.015Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "WhatsApp for iOS（バージョン 2.25.21.73 未満）、WhatsApp Business for iOS（バージョン 2.25.21.78 未満）、WhatsApp Desktop for Mac（バージョン 2.25.21.78 未満）において、リンクデバイス同期メッセージの認可が不完全であり、無関係なユーザーが任意の URL のコンテンツ処理を対象デバイスでトリガーできる可能性があります。", "risk": "任意の URL のコンテンツがデバイス上で処理される可能性があります。", "summaryEvidenceIds": [ "E1" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者がリンクデバイス同期メッセージを送信できること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E1" ] }, { "text": "対象デバイスに上記の影響を受ける WhatsApp アプリがインストールされ、該当バージョン未満であること。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E1" ] }, { "text": "公式の対象表：Facebook / WhatsApp Desktop for Mac。影響ありとして記載：2.22.25.2以上、2.25.21.78未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E2" ] }, { "text": "公式の対象表：Facebook / WhatsApp Business for iOS。影響ありとして記載：2.22.25.2以上、2.25.21.78未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E3" ] }, { "text": "公式の対象表：Facebook / WhatsApp for iOS。影響ありとして記載：2.22.25.2以上、2.25.21.73未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E2" ] }, { "text": "「WhatsApp Desktop for Mac / WhatsApp Business for iOS / WhatsApp for iOS」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-55177", "https://www.facebook.com/security/advisories/cve-2025-55177", "https://www.whatsapp.com/security/advisories/2025/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "https://nvd.nist.gov/vuln/detail/CVE-2025-55177" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E2" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-55177", "https://www.facebook.com/security/advisories/cve-2025-55177", "https://www.whatsapp.com/security/advisories/2025/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "https://nvd.nist.gov/vuln/detail/CVE-2025-55177" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json" ], "evidenceIds": [ "E2" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-55177", "https://www.facebook.com/security/advisories/cve-2025-55177", "https://www.whatsapp.com/security/advisories/2025/", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "https://nvd.nist.gov/vuln/detail/CVE-2025-55177" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "label": "CVE：facebook" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-55177", "label": "CVE公式レコード" }, { "url": "https://www.facebook.com/security/advisories/cve-2025-55177", "label": "CVE掲載の参考情報" }, { "url": "https://www.whatsapp.com/security/advisories/2025/", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55177", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v3.1/specification-document", "label": "FIRST公式：CVSS 3.1の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Incomplete authorization of linked device synchronization messages in WhatsApp for iOS prior to v2.25.21.73, WhatsApp Business for iOS v2.25.21.78, and WhatsApp for Mac v2.25.21.78 could have allowed an unrelated user to trigger processing of content from an arbitrary URL on a target’s device. We assess that this vulnerability, in combination with an OS-level vulnerability on Apple platforms (CVE-2025-43300), may have been exploited in a sophisticated attack against specific targeted users.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp Desktop for Mac\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.78\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp Business for iOS\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.78\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/55xxx/CVE-2025-55177.json", "sourceField": "/containers/cna/affected/2", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"WhatsApp for iOS\",\"vendor\":\"Facebook\",\"versions\":[{\"lessThan\":\"2.25.21.73\",\"status\":\"affected\",\"version\":\"2.22.25.2\",\"versionType\":\"semver\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-55177", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-55177\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-55177（WhatsApp Desktop for Mac / WhatsApp Business for iOS / WhatsApp for iOS）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者がリンクデバイス同期メッセージを送信できること。\n・対象デバイスに上記の影響を受ける WhatsApp アプリがインストールされ、該当バージョン未満であること。\n・公式の対象表：Facebook / WhatsApp Desktop for Mac。影響ありとして記載：2.22.25.2以上、2.25.21.78未満。\n・公式の対象表：Facebook / WhatsApp Business for iOS。影響ありとして記載：2.22.25.2以上、2.25.21.78未満。\n・公式の対象表：Facebook / WhatsApp for iOS。影響ありとして記載：2.22.25.2以上、2.25.21.73未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-55177", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:42:11.628Z", "lastSuccess": "2026-10-24T04:42:11.628Z", "sourceCheckedAt": "2026-10-24T04:42:11.628Z", "errorCode": null }, "glossary": [] } }, { "id": "CVE-2025-57819", "aliases": [], "title": "endpoint：コード実行", "summary": "FreePBX 15、16、17 エンドポイントは、ユーザーが提供したデータが十分にサニタイズされていないため、認証されていない状態で FreePBX Administrator にアクセスでき、任意のデータベース操作やリモートコード実行が可能になる脆弱性があります。", "risk": "攻撃者はデータベースを任意に書き換え、サーバー上で任意のコードを実行させることができます。", "product": "endpoint", "category": "other", "component": "package", "severity": "critical", "cvss": 10, "cvssVersion": "4.0", "cvssSource": "GitHub_M", "cvssVector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "affected": [ { "product": "endpoint", "range": "< 15.0.66" }, { "product": "endpoint", "range": "< 16.0.89" }, { "product": "endpoint", "range": "< 17.0.3" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-57819", "label": "CVE公式レコード" }, { "url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "label": "CISAが示す関連情報" }, { "url": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "label": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-57819", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-08-28T16:45:18.749Z", "modifiedAt": "2026-02-26T17:47:51.014Z", "fetchedAt": "2026-10-24T04:42:19.445Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.", "sourceTitle": "FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "vendor": "FreePBX", "product": "endpoint", "versions": [ { "version": "< 15.0.66", "status": "affected" }, { "version": "< 16.0.89", "status": "affected" }, { "version": "< 17.0.3", "status": "affected" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-57819", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "fetchedAt": "2026-10-24T04:42:19.445Z", "publishedAt": "2025-08-28T16:45:18.749Z", "modifiedAt": "2026-02-26T17:47:51.014Z", "state": "published", "provider": "GitHub_M", "title": "FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE", "descriptions": [ { "lang": "en", "value": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "FreePBX", "product": "endpoint", "sourcePath": "/containers/cna/affected/0", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "< 15.0.66", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "< 16.0.89", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "< 17.0.3", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-89", "lang": "en", "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" }, { "cweId": "CWE-288", "lang": "en", "description": "CWE-288: Authentication Bypass Using an Alternate Path or Channel", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 10, "baseSeverity": "CRITICAL", "provider": "GitHub_M", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "label": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "tags": [ "x_refsource_CONFIRM" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/0" }, { "url": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "label": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "tags": [ "x_refsource_MISC" ], "provider": "GitHub_M", "sourcePath": "/containers/cna/references/1" }, { "url": "https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819", "label": "CISA-ADP", "tags": [ "exploit" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-57819", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/1" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"vendor\":\"FreePBX\",\"product\":\"endpoint\",\"versions\":[{\"version\":\"< 15.0.66\",\"status\":\"affected\"},{\"version\":\"< 16.0.89\",\"status\":\"affected\"},{\"version\":\"< 17.0.3\",\"status\":\"affected\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-89\",\"lang\":\"en\",\"description\":\"CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/problemTypes/1/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourcePath": "/containers/cna/problemTypes/1/descriptions/0", "text": "{\"cweId\":\"CWE-288\",\"lang\":\"en\",\"description\":\"CWE-288: Authentication Bypass Using an Alternate Path or Channel\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"HIGH\",\"subIntegrityImpact\":\"HIGH\",\"subAvailabilityImpact\":\"HIGH\",\"baseScore\":10,\"baseSeverity\":\"CRITICAL\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\",\"version\":\"4.0\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-57819:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "sourcePath": "retained:/originalText", "text": "Sangoma FreePBX contains an authentication bypass vulnerability due to insufficiently sanitized user-supplied data allows unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-57819:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "modifiedAt": "2025-08-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:47:51.014Z", "fetchedAt": "2026-10-24T04:42:19.445Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-08-29T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "endpointにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:42:19.445Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "6d6205ce2305e7576ada6269daea9863b1e85f09aa9cfc69b6f921258286cf1c", "sourceModifiedAt": "2026-02-26T17:47:51.014Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "FreePBX 15、16、17 エンドポイントは、ユーザーが提供したデータが十分にサニタイズされていないため、認証されていない状態で FreePBX Administrator にアクセスでき、任意のデータベース操作やリモートコード実行が可能になる脆弱性があります。", "risk": "攻撃者はデータベースを任意に書き換え、サーバー上で任意のコードを実行させることができます。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "FreePBX の 15、16、17 系エンドポイントが対象です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "認証されていないユーザーが FreePBX Administrator にアクセスできることが前提条件です。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：FreePBX / endpoint。影響ありとして記載：< 15.0.66。影響ありとして記載：< 16.0.89。影響ありとして記載：< 17.0.3。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E3" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819" ], "evidenceIds": [ "E4" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E3" ] }, { "text": "「endpoint」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-57819", "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "https://nvd.nist.gov/vuln/detail/CVE-2025-57819" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E3" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-57819", "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "https://nvd.nist.gov/vuln/detail/CVE-2025-57819" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json" ], "evidenceIds": [ "E3" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-57819", "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "https://nvd.nist.gov/vuln/detail/CVE-2025-57819" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "label": "CVE：GitHub_M" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-57819", "label": "CVE公式レコード" }, { "url": "https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h", "label": "CISAが示す関連情報" }, { "url": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203", "label": "https://community.freepbx.org/t/security-advisory-please-lock-down-your-administrator-access/107203" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-57819", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourceField": "/containers/cna/title", "excerpt": "FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE", "language": null }, { "id": "E3", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/57xxx/CVE-2025-57819.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"vendor\":\"FreePBX\",\"product\":\"endpoint\",\"versions\":[{\"version\":\"< 15.0.66\",\"status\":\"affected\"},{\"version\":\"< 16.0.89\",\"status\":\"affected\"},{\"version\":\"< 17.0.3\",\"status\":\"affected\"}]}", "language": null, "representation": "source_json" }, { "id": "E4", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-57819", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-57819\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-57819（endpoint）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・FreePBX の 15、16、17 系エンドポイントが対象です。\n・認証されていないユーザーが FreePBX Administrator にアクセスできることが前提条件です。\n・公式の対象表：FreePBX / endpoint。影響ありとして記載：< 15.0.66。影響ありとして記載：< 16.0.89。影響ありとして記載：< 17.0.3。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-57819", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:42:19.445Z", "lastSuccess": "2026-10-24T04:42:19.445Z", "sourceCheckedAt": "2026-10-24T04:42:19.445Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" } ] } }, { "id": "CVE-2025-7775", "aliases": [], "title": "ADC / Gateway：コード実行", "summary": "NetScaler ADC と NetScaler Gateway において、メモリオーバーフローが原因でリモートコード実行やサービス拒否が起こる可能性があります。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行されたり、サービスが利用できなくなる恐れがあります。", "product": "ADC / Gateway", "category": "other", "component": "package", "severity": "critical", "cvss": 9.2, "cvssVersion": "4.0", "cvssSource": "Citrix", "cvssVector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "affected": [ { "product": "ADC", "range": ">= 14.1 / < 47.48" }, { "product": "ADC", "range": ">= 13.1 / < 59.22" }, { "product": "ADC", "range": ">= 13.1 FIPS and NDcPP / < 37.241" }, { "product": "ADC", "range": ">= 12.1 FIPS and NDcPP / < 55.330" }, { "product": "Gateway", "range": ">= 14.1 / < 47.48" }, { "product": "Gateway", "range": ">= 13.1 / < 59.22" }, { "product": "Gateway", "range": ">= 13.1 FIPS and NDcPP / < 37.241" }, { "product": "Gateway", "range": ">= 12.1 FIPS and NDcPP / < 55.330" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "label": "CVE：Citrix" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-7775", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7775", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2025-08-26T12:56:53.794Z", "modifiedAt": "2026-02-26T17:48:12.091Z", "fetchedAt": "2026-10-24T04:42:21.484Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX", "sourceTitle": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "ADC", "vendor": "NetScaler", "versions": [ { "lessThan": "47.48", "status": "affected", "version": "14.1", "versionType": "patch" }, { "lessThan": "59.22", "status": "affected", "version": "13.1", "versionType": "patch" }, { "lessThan": "37.241", "status": "affected", "version": "13.1 FIPS and NDcPP", "versionType": "patch" }, { "lessThan": "55.330", "status": "affected", "version": "12.1 FIPS and NDcPP", "versionType": "patch" } ] }, { "defaultStatus": "unaffected", "product": "Gateway", "vendor": "NetScaler", "versions": [ { "lessThan": "47.48", "status": "affected", "version": "14.1", "versionType": "patch" }, { "lessThan": "59.22", "status": "affected", "version": "13.1", "versionType": "patch" }, { "lessThan": "37.241", "status": "affected", "version": "13.1 FIPS and NDcPP", "versionType": "patch" }, { "lessThan": "55.330", "status": "affected", "version": "12.1 FIPS and NDcPP", "versionType": "patch" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2025-7775", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "fetchedAt": "2026-10-24T04:42:21.484Z", "publishedAt": "2025-08-26T12:56:53.794Z", "modifiedAt": "2026-02-26T17:48:12.091Z", "state": "published", "provider": "Citrix", "title": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service", "descriptions": [ { "lang": "en", "value": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "NetScaler", "product": "ADC", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "14.1", "lessThan": "47.48", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "13.1", "lessThan": "59.22", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "13.1 FIPS and NDcPP", "lessThan": "37.241", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "12.1 FIPS and NDcPP", "lessThan": "55.330", "versionType": "patch", "status": "affected" } ] }, { "vendor": "NetScaler", "product": "Gateway", "sourcePath": "/containers/cna/affected/1", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/1/versions/0", "version": "14.1", "lessThan": "47.48", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/1", "version": "13.1", "lessThan": "59.22", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/2", "version": "13.1 FIPS and NDcPP", "lessThan": "37.241", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/1/versions/3", "version": "12.1 FIPS and NDcPP", "lessThan": "55.330", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-119", "lang": "en", "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L", "baseScore": 9.2, "baseSeverity": "CRITICAL", "provider": "Citrix", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "label": "Citrix", "tags": [], "provider": "Citrix", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-7775", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"ADC\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"47.48\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"59.22\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.241\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"},{\"lessThan\":\"55.330\",\"status\":\"affected\",\"version\":\"12.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/affected/1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourcePath": "/containers/cna/affected/1", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gateway\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"47.48\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"59.22\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.241\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"},{\"lessThan\":\"55.330\",\"status\":\"affected\",\"version\":\"12.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-119\",\"description\":\"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"HIGH\",\"attackRequirements\":\"PRESENT\",\"attackVector\":\"NETWORK\",\"baseScore\":9.2,\"baseSeverity\":\"CRITICAL\",\"privilegesRequired\":\"NONE\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"LOW\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"HIGH\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2025-7775:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "sourcePath": "retained:/originalText", "text": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2025-7775:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "modifiedAt": "2025-08-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2026-02-26T17:48:12.091Z", "fetchedAt": "2026-10-24T04:42:21.484Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-08-26T00:00:00.000Z", "fetchedAt": "2026-10-24T04:17:49.204Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "ADC / Gatewayにコード実行に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "攻撃者に対象のシステム上でコードやコマンドを実行される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T04:42:21.484Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "988afa8cc48147dbd5322c7b8410907b358e367843146ad7a2dfb38a5469ecbb", "sourceModifiedAt": "2026-02-26T17:48:12.091Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "NetScaler ADC と NetScaler Gateway において、メモリオーバーフローが原因でリモートコード実行やサービス拒否が起こる可能性があります。", "risk": "攻撃者がこの脆弱性を利用すると、サーバー上で任意のコードが実行されたり、サービスが利用できなくなる恐れがあります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1", "E3" ], "applicability": [ { "text": "NetScaler が Gateway として構成されている場合（VPN 仮想サーバー、ICA プロキシ、CVPN、RDP プロキシ、または AAA 仮想サーバー）。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "LB 仮想サーバーのタイプが HTTP、SSL、または HTTP_QUIC で、IPv6 サービスまたは IPv6 サーバーで構成されたサービスグループにバインドされている場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "LB 仮想サーバーのタイプが HTTP、SSL、または HTTP_QUIC で、DBS IPv6 サービスまたは IPv6 DBS サーバーで構成されたサービスグループにバインドされている場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "CR 仮想サーバーのタイプが HDX である場合。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E1", "E2" ] }, { "text": "公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、47.48未満。影響ありとして記載：13.1以上、59.22未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.241未満。影響ありとして記載：12.1 FIPS and NDcPP以上、55.330未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E4" ] }, { "text": "公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、47.48未満。影響ありとして記載：13.1以上、59.22未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.241未満。影響ありとして記載：12.1 FIPS and NDcPP以上、55.330未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E5" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775" ], "evidenceIds": [ "E6" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E4" ] }, { "text": "「ADC / Gateway」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-7775", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "https://nvd.nist.gov/vuln/detail/CVE-2025-7775" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2025-7775", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "https://nvd.nist.gov/vuln/detail/CVE-2025-7775" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2025-7775", "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "https://nvd.nist.gov/vuln/detail/CVE-2025-7775" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "label": "CVE：Citrix" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2025-7775", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-7775", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourceField": "/containers/cna/title", "excerpt": "Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "sourceField": "retained:/originalText", "excerpt": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"ADC\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"47.48\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"59.22\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.241\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"},{\"lessThan\":\"55.330\",\"status\":\"affected\",\"version\":\"12.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2025/7xxx/CVE-2025-7775.json", "sourceField": "/containers/cna/affected/1", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Gateway\",\"vendor\":\"NetScaler\",\"versions\":[{\"lessThan\":\"47.48\",\"status\":\"affected\",\"version\":\"14.1\",\"versionType\":\"patch\"},{\"lessThan\":\"59.22\",\"status\":\"affected\",\"version\":\"13.1\",\"versionType\":\"patch\"},{\"lessThan\":\"37.241\",\"status\":\"affected\",\"version\":\"13.1 FIPS and NDcPP\",\"versionType\":\"patch\"},{\"lessThan\":\"55.330\",\"status\":\"affected\",\"version\":\"12.1 FIPS and NDcPP\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E6", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-7775", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2025-7775\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2025-7775（ADC / Gateway）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・NetScaler が Gateway として構成されている場合（VPN 仮想サーバー、ICA プロキシ、CVPN、RDP プロキシ、または AAA 仮想サーバー）。\n・LB 仮想サーバーのタイプが HTTP、SSL、または HTTP_QUIC で、IPv6 サービスまたは IPv6 サーバーで構成されたサービスグループにバインドされている場合。\n・LB 仮想サーバーのタイプが HTTP、SSL、または HTTP_QUIC で、DBS IPv6 サービスまたは IPv6 DBS サーバーで構成されたサービスグループにバインドされている場合。\n・CR 仮想サーバーのタイプが HDX である場合。\n・公式の対象表：NetScaler / ADC。影響ありとして記載：14.1以上、47.48未満。影響ありとして記載：13.1以上、59.22未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.241未満。影響ありとして記載：12.1 FIPS and NDcPP以上、55.330未満。\n・公式の対象表：NetScaler / Gateway。影響ありとして記載：14.1以上、47.48未満。影響ありとして記載：13.1以上、59.22未満。影響ありとして記載：13.1 FIPS and NDcPP以上、37.241未満。影響ありとして記載：12.1 FIPS and NDcPP以上、55.330未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2025-7775", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T04:42:21.484Z", "lastSuccess": "2026-10-24T04:42:21.484Z", "sourceCheckedAt": "2026-10-24T04:42:21.484Z", "errorCode": null }, "glossary": [ { "term": "任意のコード実行", "meaning": "攻撃者が用意した処理や命令を、対象のサーバー・機器に実行させられることです。実行できる権限や必要な条件は、個別の説明を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/94.html", "kind": "general_definition" }, { "term": "サービス拒否（DoS）", "meaning": "サービスや機能が停止したり、処理が遅くなったりして、通常どおり利用できなくなることです。", "sourceUrl": "https://cwe.mitre.org/data/definitions/400.html", "kind": "general_definition" } ] } }, { "id": "CVE-2024-8068", "aliases": [], "title": "Citrix Session Recording：権限の奪取", "summary": "Citrix Session Recording において、攻撃者が同じ Windows Active Directory ドメインに属する認証済みユーザーである場合、NetworkService アカウントへの権限昇格が可能になります。", "risk": "攻撃者が NetworkService アカウントの権限を取得すると、サーバー上で高い権限で操作できるようになります。", "product": "Citrix Session Recording", "category": "other", "component": "package", "severity": "medium", "cvss": 5.1, "cvssVersion": "4.0", "cvssSource": "Citrix", "cvssVector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "affected": [ { "product": "Citrix Session Recording", "range": ">= 2407 Current Release / < 24.5.200.8" }, { "product": "Citrix Session Recording", "range": ">= 1912 LTSR / < CU9 hotfix 19.12.9100.6" }, { "product": "Citrix Session Recording", "range": ">= 2203 LTSR / < CU5 hotfix 22.03.5100.11" }, { "product": "Citrix Session Recording", "range": ">= 2402 LTSR / < CU1 hotfix 24.02.1200.16" } ], "fixed": [], "steps": [ "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。" ], "references": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "label": "CVE：Citrix" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8068", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "label": "CVE掲載の参考情報" }, { "url": "https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8068", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "publishedAt": "2024-11-12T17:49:54.285Z", "modifiedAt": "2025-10-21T22:55:37.320Z", "fetchedAt": "2026-10-24T07:15:54.141Z", "exploitStatus": "confirmed", "sources": [ "CVE", "CISA KEV" ], "originalText": "Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain", "sourceTitle": "Privilege escalation to NetworkService Account access", "summaryMethod": "公式の公開情報を根拠に自動作成した日本語解説です。引用との整合性を自動検査しています。人による個別確認や利用環境の診断ではありません。", "state": "published", "affectedDetails": [ { "defaultStatus": "unaffected", "product": "Citrix Session Recording", "vendor": "Citrix", "versions": [ { "lessThan": "24.5.200.8", "status": "affected", "version": "2407 Current Release", "versionType": "patch" }, { "lessThan": "CU9 hotfix 19.12.9100.6", "status": "affected", "version": "1912 LTSR", "versionType": "patch" }, { "lessThan": "CU5 hotfix 22.03.5100.11", "status": "affected", "version": "2203 LTSR", "versionType": "patch" }, { "lessThan": "CU1 hotfix 24.02.1200.16", "status": "affected", "version": "2402 LTSR", "versionType": "patch" } ] } ], "officialEvidence": { "schemaVersion": "1.0", "id": "CVE-2024-8068", "sourceType": "CVE", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "fetchedAt": "2026-10-24T07:15:54.141Z", "publishedAt": "2024-11-12T17:49:54.285Z", "modifiedAt": "2025-10-21T22:55:37.320Z", "state": "published", "provider": "Citrix", "title": "Privilege escalation to NetworkService Account access", "descriptions": [ { "lang": "en", "value": "Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain", "sourcePath": "/containers/cna/descriptions/0/value" }, { "lang": "en", "value": "Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.", "sourcePath": "retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "representation": "retained_feed_field" } ], "affected": [ { "vendor": "Citrix", "product": "Citrix Session Recording", "sourcePath": "/containers/cna/affected/0", "defaultStatus": "unaffected", "platforms": [], "modules": [], "programFiles": [], "cpes": [], "programRoutines": [], "versions": [ { "sourcePath": "/containers/cna/affected/0/versions/0", "version": "2407 Current Release", "lessThan": "24.5.200.8", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/1", "version": "1912 LTSR", "lessThan": "CU9 hotfix 19.12.9100.6", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/2", "version": "2203 LTSR", "lessThan": "CU5 hotfix 22.03.5100.11", "versionType": "patch", "status": "affected" }, { "sourcePath": "/containers/cna/affected/0/versions/3", "version": "2402 LTSR", "lessThan": "CU1 hotfix 24.02.1200.16", "versionType": "patch", "status": "affected" } ] } ], "solutions": [], "workarounds": [], "exploits": [], "rejectedReasons": [], "problemTypes": [ { "cweId": "CWE-269", "lang": "en", "description": "CWE-269 Improper Privilege Management", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0" } ], "metrics": [ { "version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", "baseScore": 5.1, "baseSeverity": "MEDIUM", "provider": "Citrix", "sourcePath": "/containers/cna/metrics/0/cvssV4_0" } ], "references": [ { "url": "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "label": "Citrix", "tags": [], "provider": "Citrix", "sourcePath": "/containers/cna/references/0" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-8068", "label": "CISA-ADP", "tags": [ "government-resource" ], "provider": "CISA-ADP", "sourcePath": "/containers/adp/0/references/0" } ], "snippets": [ { "evidenceId": "official:/containers/cna/affected/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourcePath": "/containers/cna/affected/0", "text": "{\"defaultStatus\":\"unaffected\",\"product\":\"Citrix Session Recording\",\"vendor\":\"Citrix\",\"versions\":[{\"lessThan\":\"24.5.200.8\",\"status\":\"affected\",\"version\":\"2407 Current Release\",\"versionType\":\"patch\"},{\"lessThan\":\"CU9 hotfix 19.12.9100.6\",\"status\":\"affected\",\"version\":\"1912 LTSR\",\"versionType\":\"patch\"},{\"lessThan\":\"CU5 hotfix 22.03.5100.11\",\"status\":\"affected\",\"version\":\"2203 LTSR\",\"versionType\":\"patch\"},{\"lessThan\":\"CU1 hotfix 24.02.1200.16\",\"status\":\"affected\",\"version\":\"2402 LTSR\",\"versionType\":\"patch\"}]}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/descriptions/0/value", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourcePath": "/containers/cna/descriptions/0/value", "text": "Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain", "truncated": false, "representation": "source_excerpt" }, { "evidenceId": "official:/containers/cna/problemTypes/0/descriptions/0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourcePath": "/containers/cna/problemTypes/0/descriptions/0", "text": "{\"cweId\":\"CWE-269\",\"description\":\"CWE-269 Improper Privilege Management\",\"lang\":\"en\",\"type\":\"CWE\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "official:/containers/cna/metrics/0/cvssV4_0", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourcePath": "/containers/cna/metrics/0/cvssV4_0", "text": "{\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"attackVector\":\"ADJACENT\",\"baseScore\":5.1,\"baseSeverity\":\"MEDIUM\",\"privilegesRequired\":\"LOW\",\"providerUrgency\":\"NOT_DEFINED\",\"subAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"userInteraction\":\"NONE\",\"valueDensity\":\"NOT_DEFINED\",\"vectorString\":\"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N\",\"version\":\"4.0\",\"vulnAvailabilityImpact\":\"LOW\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"LOW\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\"}", "truncated": false, "representation": "source_json" }, { "evidenceId": "cisa:CVE-2024-8068:retained:/originalText", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "sourcePath": "retained:/originalText", "text": "Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.", "upstreamField": "shortDescription", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" }, { "evidenceId": "cisa:CVE-2024-8068:retained:/sourceAction", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "sourcePath": "retained:/sourceAction", "text": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "upstreamField": "requiredAction", "truncated": false, "representation": "retained_feed_field", "sourceType": "CISA KEV" } ], "limits": { "completeness": "official_record", "truncatedFields": [], "note": "CVE公式レコードに記載された情報です。参照先の個別ページ本文は含みません。unaffected（影響なし）の版を修正版とは推測しません。 CISAの保存済みフィードの説明・対応を、CVE本文と出典を分けて保持しています。この処理でCISAを再取得したとは扱いません。" }, "supplementarySources": [ { "sourceType": "CISA KEV retained snapshot", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "modifiedAt": "2025-08-25T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "retained": true } ] }, "sourceSnapshots": [ { "source": "CVE", "modifiedAt": "2025-10-21T22:55:37.320Z", "fetchedAt": "2026-10-24T07:15:54.141Z", "state": "published" }, { "source": "CISA KEV", "modifiedAt": "2025-08-25T00:00:00.000Z", "fetchedAt": "2026-10-24T06:17:49.270Z", "state": "published" } ], "sourceAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "sourceSummary": "Citrix Session Recordingに権限の奪取に関する脆弱性情報があります。影響を受ける条件を確認してください。", "sourceRisk": "本来与えられていない権限で、操作される可能性があります。", "guidance": { "schemaVersion": "1.0", "method": "automatic", "reviewedAt": null, "reviewState": "current", "generatedAt": "2026-10-24T07:15:54.141Z", "generatorVersion": "2026-10-23.3", "sourceFingerprint": "b3372d2768b11eaf3bfdf52c5ce539683dfc9ff6484ef0c4f53d84b7e207b0ce", "sourceModifiedAt": "2025-10-21T22:55:37.320Z", "model": "@cf/openai/gpt-oss-120b", "verificationMethod": "exact_source_excerpt_and_independent_semantic_check", "summary": "Citrix Session Recording において、攻撃者が同じ Windows Active Directory ドメインに属する認証済みユーザーである場合、NetworkService アカウントへの権限昇格が可能になります。", "risk": "攻撃者が NetworkService アカウントの権限を取得すると、サーバー上で高い権限で操作できるようになります。", "summaryEvidenceIds": [ "E1", "E2" ], "riskEvidenceIds": [ "E1" ], "applicability": [ { "text": "攻撃者は、セッション録画サーバーが所属するドメインと同じ Windows Active Directory ドメインに属し、かつ認証済みユーザーである必要があります。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068" ], "evidenceIds": [ "E1", "E3", "E2" ] }, { "text": "公式の対象表：Citrix / Citrix Session Recording。影響ありとして記載：2407 Current Release以上、24.5.200.8未満。影響ありとして記載：1912 LTSR以上、CU9 hotfix 19.12.9100.6未満。影響ありとして記載：2203 LTSR以上、CU5 hotfix 22.03.5100.11未満。影響ありとして記載：2402 LTSR以上、CU1 hotfix 24.02.1200.16未満。", "kind": "fact", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json" ], "evidenceIds": [ "E4" ] }, { "text": "CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。", "kind": "fact", "sourceUrls": [ "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068" ], "evidenceIds": [ "E5" ] } ], "versionChecks": [ { "text": "管理担当者に、利用中の製品名・開発元・版やビルド番号を確認してもらいます。上に記載した対象の機能・設定・利用者の権限も、実際の環境と照合してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json" ], "evidenceIds": [ "E4" ] }, { "text": "「Citrix Session Recording」の管理画面・設定・製品情報で、正式な製品名、開発元、版・ビルド番号を控えます。見つからない場合は、購入先・提供元・管理担当者へ下の問い合わせ文を送ってください。製品名が似ているだけでは対象とは判断できません。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8068", "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-8068" ] } ], "actions": [ { "text": "利用中の製品名・版と上の対象条件を管理担当者に伝え、この脆弱性に対応した修正の有無、適用する版・手順・実施日を確認してください。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json" ], "evidenceIds": [ "E4" ] } ], "temporaryMitigations": [ { "text": "修正が間に合わない場合は、提供元に「このCVEに有効な回避策」「利用を続けてよい条件」「修正予定日」を確認します。機能停止や接続制限が必要かは、その製品・構成に合わせて管理担当者と決めてください。", "kind": "procedure", "sourceUrls": [ "https://www.cve.org/CVERecord?id=CVE-2024-8068", "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-8068" ] } ], "verification": [ { "text": "対応を依頼した場合は、実施した版・設定と完了日時、この脆弱性への修正が含まれると判断した根拠を担当者から受け取ってください。更新後は普段使う主要な操作も確認します。", "kind": "procedure", "sourceUrls": [ "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json" ], "evidenceIds": [ "E4" ] }, { "text": "更新後に製品情報を開き直して版・ビルド番号を記録し、このCVEへの修正が含まれることを提供元の回答・修正情報と照合します。通常使う主要な操作も確かめてください。", "kind": "procedure", "sourceUrls": [ "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "https://www.cve.org/CVERecord?id=CVE-2024-8068", "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html", "https://nvd.nist.gov/vuln/detail/CVE-2024-8068" ] } ], "unknowns": [ "この解説は、利用中の機器・サイトの設定や修正の適用状況を検査した結果ではありません。製品名・版と上に示した条件を、実際の環境と照合してください。", "今回取得した資料から、修正済みと明記された版の番号を取り出せていません。修正が存在しないという意味ではありません。対象の製品・現在の版を添え、提供元に修正版の番号と適用方法を確認してください。" ], "sources": [ { "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "label": "CVE：Citrix" }, { "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "label": "CISA KEV（悪用確認）" }, { "url": "https://www.cve.org/CVERecord?id=CVE-2024-8068", "label": "CVE公式レコード" }, { "url": "https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US", "label": "CVE掲載の参考情報" }, { "url": "https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html", "label": "CISAが示す関連情報" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8068", "label": "CISAが示す関連情報" }, { "url": "https://www.first.org/cvss/v4.0/specification-document", "label": "FIRST公式：CVSS 4.0の条件の定義" }, { "url": "https://www.cisa.gov/sites/default/files/2024-09/Secure-Our-World-Software-Updates-Tip-Sheet.pdf", "label": "CISA：ソフトウェア更新の基本" } ], "evidence": [ { "id": "E1", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourceField": "/containers/cna/descriptions/0/value", "excerpt": "Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain", "language": "en", "representation": "source_excerpt" }, { "id": "E2", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourceField": "/containers/cna/title", "excerpt": "Privilege escalation to NetworkService Account access", "language": null }, { "id": "E3", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "sourceField": "retained:/originalText", "excerpt": "Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access. An attacker must be an authenticated user in the same Windows Active Directory domain as the session recording server domain.", "language": "en", "representation": "retained_feed_field" }, { "id": "E4", "sourceUrl": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2024/8xxx/CVE-2024-8068.json", "sourceField": "/containers/cna/affected/0", "excerpt": "{\"defaultStatus\":\"unaffected\",\"product\":\"Citrix Session Recording\",\"vendor\":\"Citrix\",\"versions\":[{\"lessThan\":\"24.5.200.8\",\"status\":\"affected\",\"version\":\"2407 Current Release\",\"versionType\":\"patch\"},{\"lessThan\":\"CU9 hotfix 19.12.9100.6\",\"status\":\"affected\",\"version\":\"1912 LTSR\",\"versionType\":\"patch\"},{\"lessThan\":\"CU5 hotfix 22.03.5100.11\",\"status\":\"affected\",\"version\":\"2203 LTSR\",\"versionType\":\"patch\"},{\"lessThan\":\"CU1 hotfix 24.02.1200.16\",\"status\":\"affected\",\"version\":\"2402 LTSR\",\"versionType\":\"patch\"}]}", "language": null, "representation": "source_json" }, { "id": "E5", "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-8068", "sourceField": "/exploitStatus", "excerpt": "{\"id\":\"CVE-2024-8068\",\"source\":\"CISA KEV\",\"knownExploited\":true,\"meaning\":\"CISA lists this vulnerability as known to have been exploited in the wild. This does not establish compromise of the reader's environment or prove ongoing attacks today.\"}", "language": "en", "representation": "normalized_feed_field" } ], "supportRequest": "件名：CVE-2024-8068（Citrix Session Recording）の影響と対応確認\n\n利用中の製品・サービス：[記入してください]\n現在のバージョン・設定：[不明なら「不明」と記入]\n\n次の公式情報にある条件が、私たちの環境に当てはまるか確認をお願いします。\n・攻撃者は、セッション録画サーバーが所属するドメインと同じ Windows Active Directory ドメインに属し、かつ認証済みユーザーである必要があります。\n・公式の対象表：Citrix / Citrix Session Recording。影響ありとして記載：2407 Current Release以上、24.5.200.8未満。影響ありとして記載：1912 LTSR以上、CU9 hotfix 19.12.9100.6未満。影響ありとして記載：2203 LTSR以上、CU5 hotfix 22.03.5100.11未満。影響ありとして記載：2402 LTSR以上、CU1 hotfix 24.02.1200.16未満。\n・CISAの一覧では、この脆弱性が実際の攻撃に使われたことが確認されています。対象かどうかの確認と修正を優先してください。この情報だけで、あなたの環境が被害を受けたとは判断できません。\n\n対象の場合、適用する修正・回避策、実施予定、停止や再起動の必要性、完了後の確認結果を教えてください。\n確認している情報：https://zeijaku.ittrip.xyz/vulnerabilities/CVE-2024-8068", "publicationCheckVersion": "2026-10-23.1", "sourceNotices": [], "automation": { "status": "ready", "lastAttempt": "2026-10-24T07:15:54.141Z", "lastSuccess": "2026-10-24T07:15:54.141Z", "sourceCheckedAt": "2026-10-24T07:15:54.141Z", "errorCode": null }, "glossary": [ { "term": "権限昇格", "meaning": "本来その利用者には許可されていない、より強い権限で操作できるようになることです。必要な元の権限と、得られる権限を確認します。", "sourceUrl": "https://cwe.mitre.org/data/definitions/269.html", "kind": "general_definition" } ] } } ], "total": 2238, "limit": 20, "offset": 780, "filters": { "product": "all", "type": "all", "q": "", "page": 40 }, "pagination": { "page": 40, "pageSize": 20, "totalPages": 112 }, "sources": [ { "name": "JVN", "status": "ok", "lastSuccess": "2026-10-24T08:17:50.152Z", "lastAttempt": "2026-10-24T08:17:50.152Z", "error": null, "recordCount": 20, "coverage": "JVNの新着・更新RSS。取得した記事を蓄積。JVN iPediaは含みません。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "PHP Security", "status": "ok", "lastSuccess": "2026-10-24T08:17:50.152Z", "lastAttempt": "2026-10-24T08:17:50.152Z", "error": null, "recordCount": 66, "coverage": "PHP開発元の公開アドバイザリ。公開日が新しい順とは限らない直近100件を取得し蓄積。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CISA KEV", "status": "ok", "lastSuccess": "2026-10-24T08:17:50.152Z", "lastAttempt": "2026-10-24T08:17:50.152Z", "error": null, "recordCount": 1756, "coverage": "CISAの公式GitHubミラーにある悪用確認済み一覧全件。掲載日はKEV追加日。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "NVD", "status": "ok", "lastSuccess": "2026-10-24T08:17:50.152Z", "lastAttempt": "2026-10-24T08:17:50.152Z", "error": null, "recordCount": 1, "coverage": "WordPressを含む脆弱性。初回は公開7日分、以降は全製品の変更分からWordPressと保存済みIDを追跡。停止後は最後に確認できた時刻から最大7日幅・500件ずつ再開し、残りは次回取得。 今回: 2026-10-24T07:02:50.339Z 〜 2026-10-24T08:17:50.152Z、全製品の変更 18/18件まで確認、対象1件反映。", "cursor": null, "freshness": "fresh", "stale": false }, { "name": "CVE", "status": "ok", "lastSuccess": "2026-10-24T08:17:50.152Z", "lastAttempt": "2026-10-24T08:17:50.152Z", "error": null, "recordCount": 6, "coverage": "取得したPHP/JVN情報のうち、公開日が新しい最大6件のCVE公式レコードで条件を補足。", "cursor": null, "freshness": "fresh", "stale": false } ] }