Cisco Secure Firewall flaws expose FMC, FTD, and ASA to RCE, auth bypass, and inspection bypass

Cisco disclosed multiple vulnerabilities affecting Secure Firewall Management Center (FMC), Secure Firewall Threat Defense (FTD), and Adaptive Security Appliance (ASA) software, including a remote code execution flaw tied to RADIUS handling in FMC and a separate authentication bypass issue in on-premises FMC. Additional advisories describe a path traversal vulnerability in FMC and FTD, expanding the risk to core firewall management and security enforcement platforms used in enterprise environments.

The broader set of advisories also includes a Snort deep inspection bypass in FTD, a TLS/Snort 3 denial-of-service issue, a SAML reflected cross-site scripting flaw affecting ASA and FTD, a VPN web services client-side request smuggling vulnerability, and a Lua code injection bug in ASA and FTD. Taken together, the disclosures show that Cisco firewall products were exposed to weaknesses spanning code execution, access control, traffic inspection evasion, denial of service, and web interface exploitation, creating multiple paths for attackers to disrupt defenses or gain elevated access if affected systems remain unpatched.