PT-2025-33314 · Cisco · Cisco Asa+1

Jason Crowder · Published 2024-10-10 · Updated 2025-08-14 · CVE-2025-20135

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description: A flaw exists in the DHCP client functionality of Cisco ASA and FTD Software related to improper validation of incoming DHCP packets. Exploitation may allow a remote, unauthenticated attacker to exhaust available memory. A successful exploit could lead to a denial of service (DoS) condition requiring a manual reboot. This vulnerability affects the processing of incoming DHCPv4 packets.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-11008

CVE-2025-20135

Affected Products

Cisco Asa

Cisco Ftd

References · 4

• https://bdu.fstec.ru/vul/2025-11008 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20135 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dhcp-qj7nGs4N · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-20135 · Security Note