Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362) ยท updates https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333 CVE-2025-20333: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362. CVE-2025-20362: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333. Added to CISA KEV on 2025-09-25. en Thu, 25 Sep 2025 00:00:00 GMT Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362): CISA added CVE-2025-20333 to the KEV catalog (due 2025-09-26). https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333 https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333#2025-09-25-2cbdb05a Thu, 25 Sep 2025 00:00:00 GMT critical <p>Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362): CISA added CVE-2025-20333 to the KEV catalog (due 2025-09-26).</p> Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362): CISA added CVE-2025-20362 to the KEV catalog (due 2025-09-26). https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333 https://pwn.watch/i/cisco-secure-firewall-adaptive-security-appliance-and-s-cve-2025-20333#2025-09-25-b2e04f5c Thu, 25 Sep 2025 00:00:00 GMT critical <p>Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense: 2 exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362): CISA added CVE-2025-20362 to the KEV catalog (due 2025-09-26).</p>