CVE-2025-20362

🗓️ 25 Sep 2025 16:15:32Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

CVE-2025-20362 lets unauthenticated attackers access restricted URLs via invalid input on Cisco Secure Firewall web servers.

Reporter	Title	Published	Views	Family All 34
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA	Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities	12 Nov 202512:00	–	cisa
CISA	CISA Directs Federal Agencies to Identify and Mitigate Potential Compromise of Cisco Devices	25 Sep 202512:00	–	cisa
Cisco	Continued Evolution of Persistence Mechanism Against Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense	23 Apr 202615:00	–	cisco
Cisco	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access Vulnerability	25 Sep 202516:00	–	cisco
Cisco	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability	25 Sep 202516:00	–	cisco

NVD

Node

OR

cisco adaptive_security_appliance_softwareRange9.12–9.12.4.72

cisco adaptive_security_appliance_softwareRange9.14–9.14.4.28

cisco adaptive_security_appliance_softwareRange9.16–9.16.4.85

cisco adaptive_security_appliance_softwareRange9.17.0–9.18.4.67

cisco adaptive_security_appliance_softwareRange9.19–9.20.4.10

cisco adaptive_security_appliance_softwareRange9.22–9.22.2.14

cisco adaptive_security_appliance_softwareRange9.23–9.23.1.19

Node

OR

cisco firepower_threat_defenseRange7.0.0–7.0.8.1

cisco firepower_threat_defenseRange7.1.0–7.2.10.2

cisco firepower_threat_defenseRange7.3.0–7.4.2.4

cisco firepower_threat_defenseRange7.6.0–7.6.2.1

cisco firepower_threat_defenseRange7.7.0–7.7.10.1

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
sec	www.sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 08:41Current

CVSS 3.16.5 - 8.6

EPSS0.85543

unauthenticated access restricted URLs input validation web server Cisco Secure Firewall remote attacker