CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1–1 of 1 advisories (Page 1/1)
2025-09-25
Cisco Secure ASA and FTD VPN Web Server Authentication Bypass and DoS Vulnerability (CVE-2025-20362)
[Affected Scope] Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software with Remote Access VPN enabled
[Impact] Unauthenticated remote attackers can bypass authentication to access restricted VPN-related URL endpoints, and active exploit variants can trigger unexpected device reloads, causing a complete Denial of Service (DoS)
[Mitigation] Immediately upgrade to the fixed software releases recommended in the official Cisco Security Advisory