CISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco Devices

🗓️ 25 Sep 2025 12:00:00Reported by CISAType

CISA directs federal agencies to locate, analyze, and mitigate potential compromises of Cisco ASA and Firepower devices and submit memory files by Sept 26.

Reporter	Title	Published	Views	Family All 49
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	16 May 202622:06	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	CVE-2025-20333	25 Sep 202516:12	–	attackerkb
Circl	CVE-2025-20333	25 Sep 202516:03	–	circl
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
Circl	CVE-2025-20363	25 Sep 202516:03	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA	Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities	12 Nov 202512:00	–	cisa
Cisco	Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	23 Apr 202615:00	–	cisco

Source	Link
cve	www.cve.org/CVERecord
cve	www.cve.org/CVERecord
sec	www.sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
ncsc	www.ncsc.gov.uk/news/persistent-malicious-targeting-cisco-devices
ncsc	www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/RayInitiator-LINE-VIPER/ncsc-mar-rayinitiator-line-viper.pdf

25 Sep 2025 12:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.18.6 - 9.9

EPSS0.46779

SSVC