CVE-2025-20362

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.

CISA Known Exploited Vulnerability

Vendor / Product Cisco — Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Date Added 2025-09-25

Remediation Due 2025-09-26

CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ; https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW ; https://nvd.nist.gov/vuln/detail/CVE-2025-20362

Weakness Classification (1)

CWE-862

Affected Software (12)

Vendor	Product	Version
cisco	adaptive_security_appliance_software	9.12 – 9.12.4.72
cisco	adaptive_security_appliance_software	9.14 – 9.14.4.28
cisco	adaptive_security_appliance_software	9.16 – 9.16.4.85
cisco	adaptive_security_appliance_software	9.17.0 – 9.18.4.67
cisco	adaptive_security_appliance_software	9.19 – 9.20.4.10
cisco	adaptive_security_appliance_software	9.22 – 9.22.2.14
cisco	adaptive_security_appliance_software	9.23 – 9.23.1.19
cisco	secure_firewall_threat_defense	7.0.0 – 7.0.8.1
cisco	secure_firewall_threat_defense	7.1.0 – 7.2.10.2
cisco	secure_firewall_threat_defense	7.3.0 – 7.4.2.4
cisco	secure_firewall_threat_defense	7.6.0 – 7.6.2.1
cisco	secure_firewall_threat_defense	7.7.0 – 7.7.10.1