CVE-2025-20333, CVE-2025-20362, CVE-2025-20363 - Multiple critical vulnerabilities affecting Cisco products

🗓️ 25 Sep 2025 21:02:22Reported by Ryan EmmonsType

rapid7blog

rapid7blog🔗 www.rapid7.com👁 13 Views

Cisco warns of three critical CVEs exploited in the wild; patches available; urgent update.

Reporter	Title	Published	Views	Family All 67
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	16 May 202622:06	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	CVE-2025-20333	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to execute arbitrary code.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web server of microprogramming-based network interface controllers of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) for operating systems Cisco IOS, Cisco IOS XR, and Cisco IOS XE allows a attacker to cause service interruptions.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20333	25 Sep 202516:03	–	circl
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
Circl	CVE-2025-20363	25 Sep 202516:03	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev

25 Sep 2025 21:02Current

9.2High risk

Vulners AI Score9.2

CVSS 3.18.6 - 9.9

EPSS0.85543

SSVC

three critical vulnerabilities cisco products wild exploitation patch availability urgent update