Cisco Cisco Secure Firewall 4200 Series

Name: Cisco Cisco Secure Firewall 4200 Series
Brand: Cisco

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high15medium0low

updated 2026-10-27

vulnerabilities (92)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20265US	—	15.8% (97th)	Exploit	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20133US	—	0.78% (56th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20217US	—	0.72% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20225US	—	0.71% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20224US	—	0.71% (54th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2024-20358US	medium6.7	0.70% (53rd)	—	no fix	2024-04-24	≤ vers:unknown/*
CVE-2025-20263US	—	0.68% (52nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20127US	—	0.67% (52nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20222US	—	0.64% (50th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20136US	—	0.64% (50th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20218US	medium5.8	0.63% (50th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2025-20239US	—	0.62% (49th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20243US	—	0.61% (49th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20221US	medium5.8	0.58% (47th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2025-20244US	—	0.54% (45th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20019US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20011US	medium5.8	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-76445US	medium5.3	0.53% (44th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20197US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20179US	medium5.8	0.50% (42nd)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2025-20268US	—	0.48% (41st)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20253US	—	0.47% (40th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20251US	—	0.47% (40th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-76489US	medium5.8	0.46% (39th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2025-20148US	—	0.46% (39th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2024-20340US	medium6.5	0.45% (39th)	—	no fix	2024-10-23	≤ vers:unknown/*
CVE-2025-20218US	—	0.45% (39th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20018US	—	0.45% (39th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20356US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20236US	high7.5	0.44% (38th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20052US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20031US	—	0.44% (38th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20254US	—	0.43% (37th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20252US	—	0.43% (37th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20082US	—	0.43% (37th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20134US	—	0.42% (36th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20073US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20009US	—	0.40% (35th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20050US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20006US	—	0.40% (34th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20306US	—	0.39% (33rd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2025-20219US	—	0.38% (32nd)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20039US	—	0.37% (31st)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20101US	—OT elevated	0.37% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2025-20301US	—OT elevated	0.37% (30th)	—	no fix	2025-08-14	≤ vers:cisco/unknown
CVE-2026-20103US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20043US	critical9.0	0.36% (30th)	—	no fix	2026-10-21	≤ vers:unknown/*
CVE-2026-20002US	—	0.36% (30th)	—	no fix	2026-03-04	≤ vers:unknown/*
CVE-2026-20086US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*
CVE-2026-20084US	—	0.36% (30th)	—	no fix	2026-03-25	≤ vers:unknown/*

showing 50 of 92

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime15 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')6 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-250Execution with Unnecessary Privileges4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-284Improper Access Control3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)92 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan