Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

🗓️ 26 Sep 2025 05:51:00Reported by The Hacker NewsType

thn🔗 thehackernews.com👁 4 Views

NCSC reports zero-day Cisco ASA exploits deploy RayInitiator and LINE VIPER on ASA 5500-X devices.

Reporter	Title	Published	Views	Family All 73
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	16 May 202622:06	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Adaptive_Security_Appliance_Software	22 Aug 202610:23	–	githubexploit
ATTACKERKB	CVE-2025-20362	25 Sep 202516:12	–	attackerkb
ATTACKERKB	CVE-2025-20333	25 Sep 202516:12	–	attackerkb
BDU FSTEC	The vulnerability in the web server of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to execute arbitrary code.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web-server-based VPN microprogramming system of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to compromise the confidentiality and integrity of protected information.	26 Sep 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web server of microprogramming-based network interface controllers of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) for operating systems Cisco IOS, Cisco IOS XR, and Cisco IOS XE allows a attacker to cause service interruptions.	26 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-20333	25 Sep 202516:03	–	circl
Circl	CVE-2025-20362	25 Sep 202516:14	–	circl
Circl	CVE-2025-20363	25 Sep 202516:03	–	circl

27 Sep 2025 12:13Current

9High risk

Vulners AI Score9

CVSS 3.18.6 - 9.9

EPSS0.87085

SSVC

Cisco firewall zero-day RayInitiator malware LINE VIPER malware ArcaneDoor group CVE-2025-20362 CVE-2025-20333