CVE-2025-20362

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software versions prior to 9.12 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software versions 9.12 through 9.14 Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description A flaw exists in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. This issue allows an unauthenticated, remote attacker to access restricted URL endpoints that should require authentication. The root cause is improper validation of user-supplied input within HTTP(S) requests. An attacker can exploit this by sending specially crafted HTTP requests to a targeted web server. Reports indicate active exploitation attempts, and the vulnerability has been linked to compromises of critical infrastructure in the United States, potentially enabling attackers to install spyware and steal sensitive data. The vulnerability affects devices worldwide. The Cisco PSIRT is aware of ongoing exploitation attempts. The vulnerability allows access to restricted URLs without proper authorization.

Recommendations For Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software versions prior to 9.12, update to a newer version that contains a fix for this vulnerability. For Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software versions 9.12 through 9.14, apply the security patch available on the Cisco software downloads portal. For Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified), apply the latest security updates available from Cisco.