PT-2025-33312 · Cisco · Cisco Secure Firewall Asa+2

Jason Crowder · Published 2025-08-14 · Updated 2025-08-24 · CVE-2025-20133

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall ASA Software and Secure FTD Software (affected versions not specified)

Description: A vulnerability in the management and VPN web servers of the Remote Access SSL VPN feature could allow an unauthenticated, remote attacker to cause the device to unexpectedly stop responding, resulting in a Denial-of-Service (DoS) condition. This issue is due to ineffective validation of user-supplied input during the Remote Access SSL VPN authentication process. An attacker could exploit this by sending a crafted request to the VPN service on an affected device, causing a DoS condition where the device stops responding to Remote Access SSL VPN authentication requests.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-10347

CVE-2025-20133

Affected Products

Cisco Asa

Cisco Secure Firewall Asa

Secure Ftd

References · 8

• https://bdu.fstec.ru/vul/2025-10347 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-mfPekA6e · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20133 · Security Note
• https://twitter.com/0dayPublishing/status/1956045533727887672 · Twitter Post
• https://twitter.com/CVEnew/status/1956390344095891545 · Twitter Post
• https://reddit.com/r/CyberDudeBivash/comments/1mymwqm/cyberdudebivash_daily_threatwire_analysis · Reddit Post
• https://twitter.com/CveFindCom/status/1956041368976904240 · Twitter Post
• https://t.me/true_secator/7332 · Telegram Post