Cisco Secure Firewall ASA & FTD - Authentication Bypass

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should...

CVE-2025-20362-Cisco-Scanner

CVE-2025-20362 스캐너 Cisco ASA / FTD WebVPN 인증 우회 CVE-2025-20362를 위한 안전하고 비파괴적인 Python 스캐너입니다. CVE-2025-20362 는 인증되지 않은 공격자가 경로 탐색/정규화 결함을 통해 인증을 우회하고 제한된 WebVPN 리소스에 접근할 수 있게 합니다. 개요 이 도구는 제한된 WebVPN 경로세션, 파일 목록, 설정 관련 엔드포인트 포함가 인증 없이 접근 가능한지 테스트합니다. 보안 연구자와 관리자가 테스트 권한이 있는 시스템의 노출 여부를 평가하도록...

UAT-4356's Targeting of Cisco Firepower Devices

Cisco Talos is aware of UAT-4356's continued active targeting of Cisco Firepower devices' Firepower eXtensible Operating System FXOS. UAT-4356 exploited n-day vulnerabilities CVE-2025-20333 and CVE-2025-20362 to gain unauthorized access to vulnerable devices, where the threat actor deployed their...

CISA Warns of Active Attacks on Cisco ASA and Firepower Flaws

CISA issues an urgent directive for all organizations to patch Cisco ASA and Firepower devices against CVE-2025-20362 and CVE-2025-20333, exploited in the ArcaneDoor campaign. Verify the correct version now!...

Cisco Secure Firewall Adaptive Security Appliance Software VPN Web Server Unauthorized Access (cisco-sa-asaftd-webvpn-YROOTUW)

According to its self-reported version, Cisco Adaptive Security Appliance ASA Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...

Cisco Secure Firewall Threat Defense Software VPN Web Server Unauthorized Access (cisco-sa-asaftd-webvpn-YROOTUW)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability. - A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an...

CVE-2025-20362

creationtimestamp| type| source ---|---|--- 2025-09-25 16:14:20+00:00| seen| https://infosec.exchange/users/wdormann/statuses/115265821741748007 2025-09-25 16:17:20+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0298 2025-09-25 17:14:24+00:00| seen|...

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

Cisco Secure Firewall Adaptive Security ASA Appliance and Secure Firewall Threat Defense FTD Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362...

PT-2025-39478

Federal agencies have 1 day to patch critical Cisco ASA firewall vulnerabilities CVE-2025-30333 and CVE-2025-20362 exploited by advanced hackers in the ArcaneDoor campaign linked to Chinese state actors. CiscoASA ArcaneDoor China https://t.co/SwRp9rx7TT...