Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability

🗓️ 25 Sep 2025 16:00:00Reported by CiscoType

Authenticated remote attacker can run arbitrary code as root via VPN web server flaw in Adaptive Security Appliance and Threat Defense Software; upgrade software.

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	16 May 202622:06	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	CVE-2025-20333	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to execute arbitrary code.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20333	25 Sep 202516:03	–	circl
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA	Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities	12 Nov 202512:00	–	cisa