CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance And Secure Firewall Threat Defense
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.
- CVSS
- not scored
On CISA’s exploited list
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
- Added
- 2025-09-25
- Federal patch deadline
- 2025-09-26
- Ransomware use
- not known