jordan922/cve2025-20265Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker.
Safe Python script to detect Cisco FMC instances potentially vulnerable to CVE-2025-20265. Uses official FMC API to check version, supports single/multi-target scanning, and includes a harmless local PoC marker.
What it does:
--poc mode prints a harmless local proof-of-concept marker when a vulnerable version is detected (nothing is sent to the target)⚠️ No exploit code — this tool does not attempt to exploit anything or run commands on the target.
requests ()pip install requestscolorama (pip install colorama) for better Windows color supporttargets.txt:
Run:
python fmc_cve2025_20265_checker.py
--file targets.txt
--user admin
--password 'YOURPASS'
python fmc_cve2025_20265_checker.py \
--single https://fmc.example.com \
--user admin \
--password 'YOURPASS'
Optional flags
• --insecure → Skip TLS verification (self-signed certs)
• --no-color → Disable color output
• --poc → Show harmless local PoC marker if target is vulnerable