Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
Critical Listed in CISA KEV
Summary
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Cisco:Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense
Sources
- CISA KEV DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2025-20333 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices reference
- https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions reference
- https://www.cisa.gov/eviction-strategies-tool/create-from-template reference
- https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks reference
- https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details reference
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB reference
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV