Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive

🗓️ 25 Sep 2025 18:17:00Reported by The Hacker NewsType

Cisco warns of two zero-day flaws in ASA/FTD VPN web server actively exploited; patch now per CISA ED 25-03.

Reporter	Title	Published	Views	Family All 56
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	16 May 202622:06	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	22 Aug 202610:23	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	CVE-2025-20333	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to execute arbitrary code.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20333	25 Sep 202516:03	–	circl
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability	25 Sep 202500:00	–	cisa_kev
CISA KEV Catalog	Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability	25 Sep 202500:00	–	cisa_kev