Cisco ASA Missing Authorization (CVE-2025-20362)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(506196);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/10/06");

  script_cve_id("CVE-2025-20362");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/09/26");

  script_name(english:"Cisco ASA Missing Authorization (CVE-2025-20362)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"Update: On November 5, 2025, Cisco became aware of a new attack
variant against devices running Cisco Secure ASA Software or Cisco
Secure FTD Software releases that are affected by CVE-2025-20333 and
CVE-2025-20362. This attack can cause unpatched devices to
unexpectedly reload, leading to denial of service (DoS) conditions.
Cisco strongly recommends that all customers upgrade to the fixed
software releases that are listed in the Fixed Software [#fs]
section of this advisory. A vulnerability in the VPN web server of
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and
Cisco Secure Firewall Threat Defense (FTD) Software could allow an
unauthenticated, remote attacker to access restricted URL endpoints
that are related to remote access VPN that should otherwise be
inaccessible without authentication. This vulnerability is due to
improper validation of user-supplied input in HTTP(S) requests. An
attacker could exploit this vulnerability by sending crafted HTTP
requests to a targeted web server on a device. A successful exploit
could allow the attacker to access a restricted URL without
authentication.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1d638962");
  # https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?3c68d455");
  # https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20362
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?c26d1723");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:F/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:F/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-20362");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(862);

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/09/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/09/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/10/06");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:adaptive_security_appliance_software:9");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:adaptive_security_appliance_software:9.12" :
        {"versionEndExcluding" : "9.12.4.72", "versionStartIncluding" : "9.12", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.14" :
        {"versionEndExcluding" : "9.14.4.28", "versionStartIncluding" : "9.14", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.16" :
        {"versionEndExcluding" : "9.16.4.85", "versionStartIncluding" : "9.16", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.17.0" :
        {"versionEndExcluding" : "9.18.4.67", "versionStartIncluding" : "9.17.0", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.19" :
        {"versionEndExcluding" : "9.20.4.10", "versionStartIncluding" : "9.19", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.22" :
        {"versionEndExcluding" : "9.22.2.14", "versionStartIncluding" : "9.22", "family" : "CiscoFirepower"},
    "cpe:/o:cisco:adaptive_security_appliance_software:9.23" :
        {"versionEndExcluding" : "9.23.1.19", "versionStartIncluding" : "9.23", "family" : "CiscoFirepower"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);