cve_2025_20265 — PoC for CVE-2025-20265 Cisco Secure FMC Software RADIUS Remote Code Execution Vulnerability | Kitploit

PoC for CVE-2025-20265

Advisory

⚠️ WARNING

This is a functional exploit for a 1-day vulnerability.

It can execute code on vulnerable systems.
Use only on your own internal servers you are authorized to test.
Unauthorized use is illegal and unethical.

Use at your own risk. You are responsible for your actions.

Building

Install Rust
Build the PoC:

cargo build --release

Usage

$ ./target/release/cve_2025_20265 --help
# or
$ cargo run --release -- --help

To debug, use the environment variable RUST_LOG:

RUST_LOG=debug cargo run --release -- --help

Examples

# use either the build or the path to the executable file
$ alias EXE="cargo run --release"
# or
$ cargo build --release
$ alias EXE="./target/release/cve_2025_20265"

# check the target
$ EXE https://10.10.10.1:4443/

# read targets from the file
$ echo -e "https://10.10.10.1:4443\nhttp://127.0.0.1\nhttp://10.10.10.10" > targets.txt
$ EXE --from-file targets.txt