CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-25
Cisco ASA and FTD VPN Web Server Remote Code Execution Vulnerability (CVE-2025-20333) Security Advisory
[Affected Scope] Cisco Secure Firewall ASA (Adaptive Security Appliance) and FTD (Threat Defense) software with VPN web server features enabled
[Impact] An authenticated remote attacker with valid VPN credentials can execute arbitrary code with root privileges, leading to complete compromise of the device
[Mitigation] Apply official vendor security patches immediately, enforce Multi-Factor Authentication (MFA) on all VPN accounts, and monitor HTTP traffic logs