CVE-2025-20333

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.

CISA Known Exploited Vulnerability

Vendor / Product Cisco — Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Date Added 2025-09-25

Remediation Due 2025-09-26

CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333

Weakness Classification (1)

CWE-120

Affected Software (12)

Vendor	Product	Version
cisco	adaptive_security_appliance_software	9.12 – 9.12.4.72
cisco	adaptive_security_appliance_software	9.14 – 9.14.4.28
cisco	adaptive_security_appliance_software	9.16 – 9.16.4.85
cisco	adaptive_security_appliance_software	9.17.0 – 9.17.1.45
cisco	adaptive_security_appliance_software	9.18 – 9.18.4.47
cisco	adaptive_security_appliance_software	9.19 – 9.19.1.37
cisco	adaptive_security_appliance_software	9.20 – 9.20.3.7
cisco	adaptive_security_appliance_software	9.22 – 9.22.1.3
cisco	secure_firewall_threat_defense	7.0.0 – 7.0.8.1
cisco	secure_firewall_threat_defense	7.1.0 – 7.2.9
cisco	secure_firewall_threat_defense	7.3.0 – 7.4.2.4
cisco	secure_firewall_threat_defense	7.6.0