Cisco Secure Firewall Adaptive Security Appliance和Cisco Secure Firewall Threat Defense 安全漏洞

🗓️ 25 Sep 2025 00:00:00Reported by China National Vulnerability Database of Information SecurityType

Vulnerability in Cisco Secure Firewall Adaptive Security Appliance and Threat Defense allows unauthenticated access to restricted URLs due to input validation errors.

Reporter	Title	Published	Views	Family All 34
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA	Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities	12 Nov 202512:00	–	cisa
CISA	CISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco Devices	25 Sep 202512:00	–	cisa
Cisco	Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	23 Apr 202615:00	–	cisco
Cisco	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability	25 Sep 202516:00	–	cisco
Cisco	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability	25 Sep 202516:00	–	cisco

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
access	www.access.redhat.com/security/cve/cve-2025-20362
vigilance	www.vigilance.fr/vulnerability/Cisco-ASA-privilege-escalation-via-VPN-Web-Server-48321

25 May 2026 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 3.16.5 - 8.6

EPSS0.85543

SSVC