The article from the Canadian Centre for Cyber Security (CCCS) titled "AL25-012 - Vulnerabilities impacting Cisco ASA and FTD devices – CVE-2025-20333, CVE-2025-20362 and CVE-2025-20363 – Update 1" provides critical information about vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) and Threat Defense (FTD) devices. Here are the key points:
Vulnerabilities Overview
Three major vulnerabilities have been identified:
- CVE-2025-20333: A remote code execution vulnerability in the VPN Web Server of ASA and FTD.
- CVE-2025-20362: Another remote code execution vulnerability affecting HTTP servers on ASA, FTD, IOS, IOS XE, and IOS XR software.
- CVE-2025-20363: An unauthorized access vulnerability in the VPN Web Server of ASA and FTD.
Impact
These vulnerabilities can allow attackers to execute arbitrary code or gain unauthorized access to affected systems, potentially leading to severe security breaches.
Aff
Read the full article at Malware Analysis, News and Indicators - Latest topics
Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.
