PT-2025-39420 · Cisco · Cisco Secure Firewall Adaptive Security Appliance (Asa)+2
Published
2025-09-25
·
Updated
2026-05-16
·
CVE-2025-20333
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Secure Firewall Adaptive Security Appliance (ASA) (affected versions not specified)
Cisco Secure Firewall Threat Defense (FTD) (affected versions not specified)
Description
A buffer overflow issue exists in the VPN web server of Cisco Secure Firewall ASA and FTD software due to improper validation of user-supplied input in HTTP(S) requests. An authenticated remote attacker with valid VPN user credentials could exploit this by sending specially crafted HTTP requests to an affected device. Successful exploitation allows the execution of arbitrary code with root privileges, which could lead to the complete compromise of the device. Real-world incidents of this issue being exploited have been recorded.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
RCE
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Asa
Cisco Secure Firewall Adaptive Security Appliance (Asa)
Cisco Secure Firewall Threat Defense (Ftd)