Vulnerability details
CVE-2025-20333
Actively exploited
Cisco Secure Firewall Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense Software
CVSS 3.1
9.9Critical
Remedy
Required action (CISA): The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor's instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. (due: 2025-09-26)
Official description
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 9.9Critical | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Affected products
200 of 300| Vendor | Product | Versions | Source |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.3.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.3.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.24 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.26 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.29 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.30 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.35 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.37 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.38 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.39 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.40 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.41 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.47 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.48 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.50 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.52 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.54 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.55 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.56 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.58 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.62 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.65 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.67 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.12.4.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1.19 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1.30 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.1.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.2.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.2.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.3.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.23 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.24 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.14.4.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.1.28 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3.19 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3.23 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.19 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.27 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.38 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.39 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.42 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.48 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.55 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.57 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.61 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.62 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.67 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.70 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.71 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.76 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.82 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.84 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.16.4.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.20 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.30 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.33 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.39 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.17.1.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.2.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3.39 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3.46 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3.53 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3.55 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.3.56 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.24 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.29 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.34 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.40 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.18.4.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.24 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.27 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.28 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.31 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.19.1.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.1.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.2.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.2.21 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.2.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.20.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.1.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.1.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.20 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.24 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.26 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.28 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.33 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.35 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.38 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.45 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.2.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.16 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.18 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.21 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.26 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.29 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.15 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.17 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.20 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.25 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.26 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.29 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.32 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.33 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.34 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.35 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.39 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.40 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.41 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.8.4.43 | CVEProject cvelistV5 (CNA) |
References and advisories
3- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB
- https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks vendor-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-25
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- cisco
- Kolun priority
- 90 · Critical
CISA KEV catalog
- Date added
- 2025-09-25
- Due date
- 2025-09-26
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
72.03%
Probability of exploitation in 30 days
99.4%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')