CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 扫描器 一个安全、非破坏性的 Python 扫描器，用于检测 Cisco ASA / FTD WebVPN 认证绕过漏洞（CVE-2025-20362） 。 CVE-2025-20362 允许未经身份验证的攻击者通过路径遍历/规范化缺陷绕过认证并访问受限制的 WebVPN 资源。 概述 该工具用于测试受限制的 WebVPN 路径（包括会话、文件列表及配置相关的端点）是否可以在无需认证的情况下被访问。专为安全研究人员和管理员设计，用于评估他们授权测试的系统的暴露风险。 注意 ：此脚本仅执行 GET 请求 ，不尝试进行漏洞利用。 漏洞详情 CVE ID :...

Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

UAT-4356's Targeting of Cisco Firepower Devices

Cisco Talos is aware of UAT-4356's continued active targeting of Cisco Firepower devices' Firepower eXtensible Operating System FXOS. UAT-4356 exploited n-day vulnerabilities CVE-2025-20333 and CVE-2025-20362 to gain unauthorized access to vulnerable devices, where the threat actor deployed their...

CISA Warns of Active Attacks on Cisco ASA and Firepower Flaws

CISA issues an urgent directive for all organizations to patch Cisco ASA and Firepower devices against CVE-2025-20362 and CVE-2025-20333, exploited in the ArcaneDoor campaign. Verify the correct version now!...

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

The U.K. National Cyber Security Centre NCSC has revealed that threat actors have exploited the recently disclosed security flaws impacting Cisco firewalls as part of zero-day attacks to deliver previously undocumented malware families like RayInitiator and LINE VIPER. "The RayInitiator and LINE...

Cisco Secure Firewall Adaptive Security Appliance Software VPN Web Server Unauthorized Access (cisco-sa-asaftd-webvpn-YROOTUW)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...

Cisco Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access (cisco-sa-asaftd-webvpn-YROOTUW)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...

CVE-2025-20362

creationtimestamp| type| source ---|---|--- 2025-09-25 16:14:20+00:00| seen| https://infosec.exchange/users/wdormann/statuses/115265821741748007 2025-09-25 16:17:20+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0298 2025-09-25 17:14:24+00:00| seen|...

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco Secure Firewall Adaptive Security ASA Appliance and Secure Firewall Threat Defense FTD Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362...

PT-2025-39478

Federal agencies have 1 day to patch critical Cisco ASA firewall vulnerabilities CVE-2025-30333 and CVE-2025-20362 exploited by advanced hackers in the ArcaneDoor campaign linked to Chinese state actors. CiscoASA ArcaneDoor China https://t.co/SwRp9rx7TT...