The vulnerability of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) microprogramming software lies in the lack of a mechanism for assigning internal resource access levels for debugging purposes. This allows attackers to elevate their privileges and execute arbitrary commands.

🗓️ 12 Sep 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

ASA and Firepower microprogramming lack debugging access controls, enabling privilege escalation and arbitrary commands.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-20238	14 Aug 202516:29	–	attackerkb
Circl	CVE-2025-20238	14 Aug 202517:02	–	circl
CNNVD	Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞	14 Aug 202500:00	–	cnnvd
CVE	CVE-2025-20238	14 Aug 202516:29	–	cve
Cvelist	CVE-2025-20238	14 Aug 202516:29	–	cvelist
EUVD	EUVD-2025-24934	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Secure Firewall Software	15 Aug 202508:52	–	ncsc
NVD	CVE-2025-20238	14 Aug 202517:15	–	nvd
Positive Technologies	PT-2025-33326 · Cisco · Cisco Secure Firewall Threat Defense (Ftd) +1	14 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20238	16 Aug 202517:25	–	redhatcve

Vulners

Node

cisco_systems firepower_threat_defenseMatch6.2.3

OR

cisco_systems firepower_threat_defenseMatch6.4.0

OR

cisco_systems firepower_threat_defenseMatch6.2.3.16

OR

cisco_systems adaptive_security_applianceMatch9.8.4.22

OR

cisco_systems adaptive_security_applianceMatch9.8.4.25

OR

cisco_systems adaptive_security_applianceMatch9.12.4.2

OR

cisco_systems adaptive_security_applianceMatch9.14.1.15

OR

cisco_systems adaptive_security_applianceMatch9.16.1

OR

cisco_systems firepower_threat_defenseMatch7.0.0

OR

cisco_systems firepower_threat_defenseMatch7.2.0

OR

cisco_systems firepower_threat_defenseMatch7.2.0.1

OR

cisco_systems adaptive_security_applianceMatch9.14.1

OR

cisco_systems adaptive_security_applianceMatch9.14.1.10

OR

cisco_systems adaptive_security_applianceMatch9.14.1.19

OR

cisco_systems adaptive_security_applianceMatch9.14.1.30

OR

cisco_systems adaptive_security_applianceMatch9.14.2

OR

cisco_systems adaptive_security_applianceMatch9.14.2.4

OR

cisco_systems adaptive_security_applianceMatch9.14.2.8

OR

cisco_systems adaptive_security_applianceMatch9.14.2.13

OR

cisco_systems adaptive_security_applianceMatch9.14.2.15

OR

cisco_systems adaptive_security_applianceMatch9.14.3

OR

cisco_systems adaptive_security_applianceMatch9.14.3.1

OR

cisco_systems adaptive_security_applianceMatch9.14.3.9

OR

cisco_systems adaptive_security_applianceMatch9.14.3.13

OR

cisco_systems adaptive_security_applianceMatch9.14.3.15

OR

cisco_systems adaptive_security_applianceMatch9.14.3.18

OR

cisco_systems firepower_threat_defenseMatch6.6.0

OR

cisco_systems firepower_threat_defenseMatch6.6.0.1

OR

cisco_systems firepower_threat_defenseMatch6.6.1

OR

cisco_systems firepower_threat_defenseMatch6.6.3

OR

cisco_systems firepower_threat_defenseMatch6.6.4

OR

cisco_systems firepower_threat_defenseMatch6.6.5

OR

cisco_systems firepower_threat_defenseMatch6.6.5.1

OR

cisco_systems firepower_threat_defenseMatch6.6.5.2

OR

cisco_systems firepower_threat_defenseMatch7.0.0.1

OR

cisco_systems firepower_threat_defenseMatch7.0.1

OR

cisco_systems firepower_threat_defenseMatch7.0.1.1

OR

cisco_systems firepower_threat_defenseMatch7.0.2

OR

cisco_systems firepower_threat_defenseMatch7.0.2.1

OR

cisco_systems firepower_threat_defenseMatch7.0.3

OR

cisco_systems firepower_threat_defenseMatch7.0.4

OR

cisco_systems firepower_threat_defenseMatch7.1.0.1

OR

cisco_systems firepower_threat_defenseMatch7.1.0.2

OR

cisco_systems adaptive_security_applianceMatch9.8.1

OR

cisco_systems adaptive_security_applianceMatch9.8.1.5

OR

cisco_systems adaptive_security_applianceMatch9.8.1.7

OR

cisco_systems adaptive_security_applianceMatch9.8.2

OR

cisco_systems adaptive_security_applianceMatch9.8.2.8

OR

cisco_systems adaptive_security_applianceMatch9.8.2.14

OR

cisco_systems adaptive_security_applianceMatch9.8.2.15

OR

cisco_systems adaptive_security_applianceMatch9.8.2.17

OR

cisco_systems adaptive_security_applianceMatch9.8.2.20

OR

cisco_systems adaptive_security_applianceMatch9.8.2.24

OR

cisco_systems adaptive_security_applianceMatch9.8.2.26

OR

cisco_systems adaptive_security_applianceMatch9.8.2.28

OR

cisco_systems adaptive_security_applianceMatch9.8.2.33

OR

cisco_systems adaptive_security_applianceMatch9.8.2.35

OR

cisco_systems adaptive_security_applianceMatch9.8.2.38

OR

cisco_systems adaptive_security_applianceMatch9.8.3

OR

cisco_systems adaptive_security_applianceMatch9.8.3.8

OR

cisco_systems adaptive_security_applianceMatch9.8.3.11

OR

cisco_systems adaptive_security_applianceMatch9.8.3.14

OR

cisco_systems adaptive_security_applianceMatch9.8.3.16

OR

cisco_systems adaptive_security_applianceMatch9.8.3.18

OR

cisco_systems adaptive_security_applianceMatch9.8.3.21

OR

cisco_systems adaptive_security_applianceMatch9.8.3.26

OR

cisco_systems adaptive_security_applianceMatch9.8.3.29

OR

cisco_systems adaptive_security_applianceMatch9.8.4

OR

cisco_systems adaptive_security_applianceMatch9.8.4.3

OR

cisco_systems adaptive_security_applianceMatch9.8.4.7

OR

cisco_systems adaptive_security_applianceMatch9.8.4.8

OR

cisco_systems adaptive_security_applianceMatch9.8.4.10

OR

cisco_systems adaptive_security_applianceMatch9.8.4.12

OR

cisco_systems adaptive_security_applianceMatch9.8.4.15

OR

cisco_systems adaptive_security_applianceMatch9.8.4.17

OR

cisco_systems adaptive_security_applianceMatch9.14.3.11

OR

cisco_systems adaptive_security_applianceMatch9.14.4.6

OR

cisco_systems adaptive_security_applianceMatch9.14.4

OR

cisco_systems adaptive_security_applianceMatch9.14.4.7

OR

cisco_systems adaptive_security_applianceMatch9.14.4.12

OR

cisco_systems adaptive_security_applianceMatch9.16.3

OR

cisco_systems adaptive_security_applianceMatch9.16.3.3

OR

cisco_systems adaptive_security_applianceMatch9.16.3.14

OR

cisco_systems adaptive_security_applianceMatch9.17.1

OR

cisco_systems adaptive_security_applianceMatch9.17.1.7

OR

cisco_systems adaptive_security_applianceMatch9.17.1.9

OR

cisco_systems adaptive_security_applianceMatch9.17.1.10

OR

cisco_systems adaptive_security_applianceMatch9.17.1.11

OR

cisco_systems adaptive_security_applianceMatch9.17.1.13

OR

cisco_systems adaptive_security_applianceMatch9.17.1.15

OR

cisco_systems adaptive_security_applianceMatch9.18.1

OR

cisco_systems firepower_threat_defenseMatch6.6.7

OR

cisco_systems adaptive_security_applianceMatch9.16.1.28

OR

cisco_systems adaptive_security_applianceMatch9.16.2

OR

cisco_systems adaptive_security_applianceMatch9.16.2.3

OR

cisco_systems adaptive_security_applianceMatch9.16.2.7

OR

cisco_systems adaptive_security_applianceMatch9.16.2.11

OR

cisco_systems adaptive_security_applianceMatch9.16.2.13

OR

cisco_systems adaptive_security_applianceMatch9.16.2.14

OR

cisco_systems adaptive_security_applianceMatch9.16.3.15

OR

cisco_systems adaptive_security_applianceMatch9.16.3.19

OR

cisco_systems adaptive_security_applianceMatch9.16.3.23

OR

cisco_systems adaptive_security_applianceMatch9.16.4

OR

cisco_systems adaptive_security_applianceMatch9.16.4.9

OR

cisco_systems adaptive_security_applianceMatch9.17.1.20

OR

cisco_systems adaptive_security_applianceMatch9.18.1.3

OR

cisco_systems adaptive_security_applianceMatch9.18.2

OR

cisco_systems adaptive_security_applianceMatch9.18.2.5

OR

cisco_systems adaptive_security_applianceMatch9.18.2.7

OR

cisco_systems adaptive_security_applianceMatch9.19.1

OR

cisco_systems firepower_threat_defenseMatch7.0.5

OR

cisco_systems firepower_threat_defenseMatch7.1.0.3

OR

cisco_systems firepower_threat_defenseMatch7.2.1

OR

cisco_systems firepower_threat_defenseMatch7.2.2

OR

cisco_systems firepower_threat_defenseMatch7.2.3

OR

cisco_systems firepower_threat_defenseMatch7.3.0

OR

cisco_systems firepower_threat_defenseMatch7.3.1

OR

cisco_systems firepower_threat_defenseMatch7.3.1.1

OR

cisco_systems firepower_threat_defenseMatch7.2.4

OR

cisco_systems adaptive_security_applianceMatch9.8.4.20

OR

cisco_systems adaptive_security_applianceMatch9.8.4.26

OR

cisco_systems adaptive_security_applianceMatch9.8.4.29

OR

cisco_systems adaptive_security_applianceMatch9.12.1

OR

cisco_systems adaptive_security_applianceMatch9.12.1.2

OR

cisco_systems adaptive_security_applianceMatch9.12.1.3

OR

cisco_systems adaptive_security_applianceMatch9.12.2

OR

cisco_systems adaptive_security_applianceMatch9.12.2.1

OR

cisco_systems adaptive_security_applianceMatch9.12.2.4

OR

cisco_systems adaptive_security_applianceMatch9.12.2.5

OR

cisco_systems adaptive_security_applianceMatch9.12.2.9

OR

cisco_systems adaptive_security_applianceMatch9.12.3

OR

cisco_systems adaptive_security_applianceMatch9.12.3.2

OR

cisco_systems adaptive_security_applianceMatch9.12.3.7

OR

cisco_systems adaptive_security_applianceMatch9.12.3.9

OR

cisco_systems adaptive_security_applianceMatch9.12.4

OR

cisco_systems adaptive_security_applianceMatch9.12.4.4

OR

cisco_systems adaptive_security_applianceMatch9.12.4.7

OR

cisco_systems adaptive_security_applianceMatch9.12.4.8

OR

cisco_systems adaptive_security_applianceMatch9.12.4.10

OR

cisco_systems adaptive_security_applianceMatch9.12.4.13

OR

cisco_systems adaptive_security_applianceMatch9.12.4.18

OR

cisco_systems adaptive_security_applianceMatch9.12.4.24

OR

cisco_systems adaptive_security_applianceMatch9.12.4.26

OR

cisco_systems adaptive_security_applianceMatch9.12.4.29

OR

cisco_systems adaptive_security_applianceMatch9.12.4.30

OR

cisco_systems adaptive_security_applianceMatch9.12.4.35

OR

cisco_systems adaptive_security_applianceMatch9.14.1.6

OR

cisco_systems adaptive_security_applianceMatch9.8.4.32

OR

cisco_systems adaptive_security_applianceMatch9.8.4.33

OR

cisco_systems adaptive_security_applianceMatch9.8.4.34

OR

cisco_systems adaptive_security_applianceMatch9.8.4.35

OR

cisco_systems adaptive_security_applianceMatch9.8.4.39

OR

cisco_systems adaptive_security_applianceMatch9.8.4.40

OR

cisco_systems adaptive_security_applianceMatch9.8.4.41

OR

cisco_systems adaptive_security_applianceMatch9.8.4.43

OR

cisco_systems adaptive_security_applianceMatch9.8.4.44

OR

cisco_systems adaptive_security_applianceMatch9.8.4.45

OR

cisco_systems adaptive_security_applianceMatch9.8.4.46

OR

cisco_systems adaptive_security_applianceMatch9.8.4.48

OR

cisco_systems adaptive_security_applianceMatch9.12.3.12

OR

cisco_systems adaptive_security_applianceMatch9.12.4.37

OR

cisco_systems adaptive_security_applianceMatch9.12.4.38

OR

cisco_systems adaptive_security_applianceMatch9.12.4.39

OR

cisco_systems adaptive_security_applianceMatch9.12.4.40

OR

cisco_systems adaptive_security_applianceMatch9.12.4.41

OR

cisco_systems adaptive_security_applianceMatch9.12.4.47

OR

cisco_systems adaptive_security_applianceMatch9.12.4.48

OR

cisco_systems adaptive_security_applianceMatch9.12.4.50

OR

cisco_systems adaptive_security_applianceMatch9.12.4.52

OR

cisco_systems adaptive_security_applianceMatch9.12.4.54

OR

cisco_systems adaptive_security_applianceMatch9.12.4.55

OR

cisco_systems adaptive_security_applianceMatch9.12.4.56

OR

cisco_systems adaptive_security_applianceMatch9.14.4.13

OR

cisco_systems adaptive_security_applianceMatch9.14.4.14

OR

cisco_systems adaptive_security_applianceMatch9.14.4.15

OR

cisco_systems adaptive_security_applianceMatch9.14.4.17

OR

cisco_systems adaptive_security_applianceMatch9.14.4.22

OR

cisco_systems adaptive_security_applianceMatch9.14.4.23

OR

cisco_systems adaptive_security_applianceMatch9.16.4.14

OR

cisco_systems adaptive_security_applianceMatch9.16.4.18

OR

cisco_systems adaptive_security_applianceMatch9.17.1.30

OR

cisco_systems adaptive_security_applianceMatch9.18.2.8

OR

cisco_systems adaptive_security_applianceMatch9.18.3

OR

cisco_systems adaptive_security_applianceMatch9.19.1.5

OR

cisco_systems adaptive_security_applianceMatch9.19.1.9

OR

cisco_systems firepower_threat_defenseMatch6.2.3.3

OR

cisco_systems firepower_threat_defenseMatch6.2.3.4

OR

cisco_systems firepower_threat_defenseMatch6.2.3.5

OR

cisco_systems firepower_threat_defenseMatch6.2.3.6

OR

cisco_systems firepower_threat_defenseMatch6.2.3.7

OR

cisco_systems firepower_threat_defenseMatch6.2.3.8

OR

cisco_systems firepower_threat_defenseMatch6.2.3.9

OR

cisco_systems firepower_threat_defenseMatch6.2.3.10

OR

cisco_systems firepower_threat_defenseMatch6.2.3.11

OR

cisco_systems firepower_threat_defenseMatch6.2.3.12

OR

cisco_systems firepower_threat_defenseMatch6.2.3.13

OR

cisco_systems firepower_threat_defenseMatch6.2.3.14

OR

cisco_systems firepower_threat_defenseMatch6.2.3.15

OR

cisco_systems firepower_threat_defenseMatch6.2.3.17

OR

cisco_systems firepower_threat_defenseMatch6.2.3.18

OR

cisco_systems firepower_threat_defenseMatch6.4.0.1

OR

cisco_systems firepower_threat_defenseMatch6.4.0.2

OR

cisco_systems firepower_threat_defenseMatch6.4.0.3

OR

cisco_systems firepower_threat_defenseMatch6.4.0.4

OR

cisco_systems firepower_threat_defenseMatch6.4.0.5

OR

cisco_systems firepower_threat_defenseMatch6.4.0.6

OR

cisco_systems firepower_threat_defenseMatch6.4.0.7

OR

cisco_systems firepower_threat_defenseMatch6.4.0.8

OR

cisco_systems firepower_threat_defenseMatch6.4.0.9

OR

cisco_systems firepower_threat_defenseMatch6.4.0.10

OR

cisco_systems firepower_threat_defenseMatch6.4.0.11

OR

cisco_systems firepower_threat_defenseMatch6.4.0.12

OR

cisco_systems firepower_threat_defenseMatch6.4.0.13

OR

cisco_systems firepower_threat_defenseMatch6.4.0.14

OR

cisco_systems firepower_threat_defenseMatch6.4.0.15

OR

cisco_systems firepower_threat_defenseMatch6.4.0.16

OR

cisco_systems firepower_threat_defenseMatch6.6.7.1

OR

cisco_systems firepower_threat_defenseMatch7.1.0

OR

cisco_systems firepower_threat_defenseMatch6.2.3.1

OR

cisco_systems firepower_threat_defenseMatch6.2.3.2

OR

cisco_systems adaptive_security_applianceMatch9.12.4.58

OR

cisco_systems adaptive_security_applianceMatch9.16.4.19

OR

cisco_systems adaptive_security_applianceMatch9.16.4.27

OR

cisco_systems adaptive_security_applianceMatch9.18.3.39

OR

cisco_systems adaptive_security_applianceMatch9.18.3.46

OR

cisco_systems adaptive_security_applianceMatch9.19.1.12

OR

cisco_systems firepower_threat_defenseMatch7.0.6

OR

cisco_systems adaptive_security_applianceMatch9.16.4.38

OR

cisco_systems adaptive_security_applianceMatch9.18.3.53

OR

cisco_systems adaptive_security_applianceMatch9.18.3.55

OR

cisco_systems adaptive_security_applianceMatch9.19.1.18

OR

cisco_systems firepower_threat_defenseMatch7.2.4.1

OR

cisco_systems firepower_threat_defenseMatch7.2.5

OR

cisco_systems adaptive_security_applianceMatch9.12.4.62

OR

cisco_systems adaptive_security_applianceMatch9.12.4.65

OR

cisco_systems adaptive_security_applianceMatch9.16.4.39

OR

cisco_systems adaptive_security_applianceMatch9.16.4.42

OR

cisco_systems adaptive_security_applianceMatch9.16.4.48

OR

cisco_systems adaptive_security_applianceMatch9.16.4.55

OR

cisco_systems adaptive_security_applianceMatch9.17.1.33

OR

cisco_systems adaptive_security_applianceMatch9.18.3.56

OR

cisco_systems adaptive_security_applianceMatch9.18.4

OR

cisco_systems adaptive_security_applianceMatch9.18.4.5

OR

cisco_systems adaptive_security_applianceMatch9.18.4.8

OR

cisco_systems adaptive_security_applianceMatch9.19.1.22

OR

cisco_systems adaptive_security_applianceMatch9.19.1.24

OR

cisco_systems adaptive_security_applianceMatch9.19.1.27

OR

cisco_systems adaptive_security_applianceMatch9.20.1

OR

cisco_systems adaptive_security_applianceMatch9.20.1.5

OR

cisco_systems adaptive_security_applianceMatch9.20.2

OR

cisco_systems firepower_threat_defenseMatch6.4.0.17

OR

cisco_systems firepower_threat_defenseMatch7.0.6.1

OR

cisco_systems firepower_threat_defenseMatch7.2.5.1

OR

cisco_systems firepower_threat_defenseMatch7.4.0

OR

cisco_systems firepower_threat_defenseMatch7.4.1

OR

cisco_systems firepower_threat_defenseMatch7.3.1.2

OR

cisco_systems firepower_threat_defenseMatch6.6.7.2

OR

cisco_systems adaptive_security_applianceMatch9.8.2.45

OR

cisco_systems adaptive_security_applianceMatch9.14.4.24

OR

cisco_systems adaptive_security_applianceMatch9.16.4.57

OR

cisco_systems adaptive_security_applianceMatch9.16.4.61

OR

cisco_systems adaptive_security_applianceMatch9.17.1.39

OR

cisco_systems adaptive_security_applianceMatch9.18.4.22

OR

cisco_systems adaptive_security_applianceMatch9.18.4.24

OR

cisco_systems adaptive_security_applianceMatch9.18.4.29

OR

cisco_systems adaptive_security_applianceMatch9.19.1.28

OR

cisco_systems adaptive_security_applianceMatch9.19.1.31

OR

cisco_systems adaptive_security_applianceMatch9.20.2.10

OR

cisco_systems adaptive_security_applianceMatch9.20.2.21

OR

cisco_systems adaptive_security_applianceMatch9.20.2.22

OR

cisco_systems firepower_threat_defenseMatch7.0.6.2

OR

cisco_systems firepower_threat_defenseMatch7.2.5.2

OR

cisco_systems firepower_threat_defenseMatch7.2.8.1

OR

cisco_systems firepower_threat_defenseMatch7.4.1.1

OR

cisco_systems adaptive_security_applianceMatch9.12.4.67

OR

cisco_systems firepower_threat_defenseMatch6.4.0.18

OR

cisco_systems firepower_threat_defenseMatch7.2.6

OR

cisco_systems firepower_threat_defenseMatch7.2.7

OR

cisco_systems adaptive_security_applianceMatch9.16.4.67

OR

cisco_systems adaptive_security_applianceMatch9.16.4.70

OR

cisco_systems adaptive_security_applianceMatch9.18.4.40

OR

cisco_systems adaptive_security_applianceMatch9.20.3

OR

cisco_systems adaptive_security_applianceMatch9.16.4.62

OR

cisco_systems adaptive_security_applianceMatch9.18.4.34

OR

cisco_systems firepower_threat_defenseMatch7.2.8

OR

cisco_systems firepower_threat_defenseMatch7.4.2

OR

cisco_systems adaptive_security_applianceMatch9.20.3.4

OR

cisco_systems adaptive_security_applianceMatch9.20.3.7

OR

cisco_systems adaptive_security_applianceMatch9.22.1.1

OR

cisco_systems firepower_threat_defenseMatch7.4.2.1

OR

cisco_systems firepower_threat_defenseMatch7.6.0

OR

cisco_systems adaptive_security_applianceMatch9.16.4.71

OR

cisco_systems adaptive_security_applianceMatch9.16.4.76

OR

cisco_systems adaptive_security_applianceMatch9.16.4.82

OR

cisco_systems adaptive_security_applianceMatch9.17.1.45

OR

cisco_systems adaptive_security_applianceMatch9.17.1.46

OR

cisco_systems adaptive_security_applianceMatch9.18.4.47

OR

cisco_systems adaptive_security_applianceMatch9.18.4.50

OR

cisco_systems adaptive_security_applianceMatch9.18.4.52

OR

cisco_systems adaptive_security_applianceMatch9.18.4.53

OR

cisco_systems adaptive_security_applianceMatch9.19.1.37

OR

cisco_systems adaptive_security_applianceMatch9.19.1.38

OR

cisco_systems adaptive_security_applianceMatch9.20.3.9

OR

cisco_systems adaptive_security_applianceMatch9.20.3.10

OR

cisco_systems adaptive_security_applianceMatch9.20.3.13

OR

cisco_systems adaptive_security_applianceMatch9.22.1.3

OR

cisco_systems adaptive_security_applianceMatch9.22.1.2

OR

cisco_systems adaptive_security_applianceMatch9.22.1.6

OR

cisco_systems adaptive_security_applianceMatch9.23.1

OR

cisco_systems firepower_threat_defenseMatch7.0.6.3

OR

cisco_systems firepower_threat_defenseMatch7.0.7

OR

cisco_systems firepower_threat_defenseMatch7.2.9

OR

cisco_systems firepower_threat_defenseMatch7.4.2.2

OR

cisco_systems firepower_threat_defenseMatch7.7.0

Source	Link
cve	www.cve.org/CVERecord
web	www.web.nvd.nist.gov/view/vuln/detail
dbugs	www.dbugs.ptsecurity.com/vulnerability/PT-2025-33326
vuldb	www.vuldb.com/de/

12 Sep 2025 00:00Current

6Medium risk

Vulners AI Score6

CVSS 36

CVSS 26.2

EPSS0.00136

adaptive security appliance firepower threat defense microprogramming software debugging access controls privilege escalation arbitrary commands