PT-2025-33330 · Cisco · Cisco Secure Firewall Threat Defense (Ftd)+2

T.Ve · Published 2025-08-14 · Updated 2025-08-15 · CVE-2025-20251

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software (affected versions not specified)

Description: A vulnerability in the Remote Access SSL VPN service could allow an authenticated, remote attacker to create or delete arbitrary files on the underlying operating system. Manipulation of critical system files could lead to a denial of service (DoS) condition, potentially dropping existing sessions and preventing new ones. An exploited device requires a manual reboot to recover. The issue is due to insufficient input validation when processing HTTP requests. An attacker could exploit this by sending crafted HTTP requests to an affected device.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1287

Related Identifiers

BDU:2025-10356

CVE-2025-20251

Affected Products

Cisco Asa

Cisco Secure Firewall Asa

Cisco Secure Firewall Threat Defense (Ftd)

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-20251 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-http-file-hUyX2jL4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10356 · Security Note
• https://twitter.com/CVEnew/status/1956390327213846836 · Twitter Post
• https://t.me/true_secator/7332 · Telegram Post
• https://twitter.com/0dayPublishing/status/1956045536554815950 · Twitter Post
• https://twitter.com/CveFindCom/status/1956040973181415485 · Twitter Post