{"schemaVersion":3,"id":"CVE-2025-20333","aliases":[],"status":"published","duplicateOf":null,"title":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","description":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\n\n This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.","dates":{"published":"2025-09-25T16:12:14.308Z","modified":"2026-02-26T17:47:58.577Z","reserved":null,"kevAdded":["2025-09-25T00:00:00.000Z"],"kevDue":["2025-09-26T00:00:00.000Z"]},"cvss":{"headline":{"score":9.9,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.9,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.71207,"percentile":0.99406,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.5560000000000009,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.70651},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.71207,"percentile":0.99406}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.70651,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.71207,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.71207,"percentile":0.99406}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-09-25T00:00:00.000Z","dueDate":"2025-09-26T00:00:00.000Z","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","description":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.","notes":[{"type":"text","value":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices"},{"type":"url","href":"https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions","label":"www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions"},{"type":"url","href":"https://www.cisa.gov/eviction-strategies-tool/create-from-template","label":"www.cisa.gov/eviction-strategies-tool/create-from-template"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks","label":"sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details","label":"sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB","label":"sec.cloudapps.cisco.com/security/…"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2025-20333","label":"nvd.nist.gov/vuln/detail/CVE-2025-20333"}],"vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2025-09-25T00:00:00.000Z","dueDate":"2025-09-26T00:00:00.000Z","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","description":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.","notes":[{"type":"text","value":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices"},{"type":"url","href":"https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions","label":"www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions"},{"type":"url","href":"https://www.cisa.gov/eviction-strategies-tool/create-from-template","label":"www.cisa.gov/eviction-strategies-tool/create-from-template"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks","label":"sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details","label":"sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks"},{"type":"url","href":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB","label":"sec.cloudapps.cisco.com/security/…"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2025-20333","label":"nvd.nist.gov/vuln/detail/CVE-2025-20333"}],"vendor":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","description":"The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/120.html"}],"affected":[{"vendor":"cisco","product":"adaptive_security_appliance_software","name":"adaptive security appliance software","label":"adaptive_security_appliance_software","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"≥ 9.12, < 9.12.4.72","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.14, < 9.14.4.28","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.16, < 9.16.4.85","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.17.0, < 9.17.1.45","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.18, < 9.18.4.47","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.19, < 9.19.1.37","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.20, < 9.20.3.7","noFixRecorded":false,"fixedIn":null},{"text":"≥ 9.22, < 9.22.1.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.12, < 9.12.4.72 | ≥ 9.14, < 9.14.4.28 | ≥ 9.16, < 9.16.4.85 | ≥ 9.17.0, < 9.17.1.45 | ≥ 9.18, < 9.18.4.47 | ≥ 9.19, < 9.19.1.37 | ≥ 9.20, < 9.20.3.7 | ≥ 9.22, < 9.22.1.3","eol":null,"hubHref":"/vendor/cisco/adaptive_security_appliance_software"},{"vendor":"cisco","product":"cisco secure firewall adaptive security appliance (asa) software","name":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","label":"cisco secure firewall adaptive security appliance (asa) software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.8.1","noFixRecorded":false,"fixedIn":null},{"text":"9.8.1.5","noFixRecorded":false,"fixedIn":null},{"text":"9.8.1.7","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.8","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.14","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.15","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.17","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.20","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.24","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.26","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.28","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.33","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.35","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.38","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.8","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.11","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.14","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.16","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.18","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.21","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.26","noFixRecorded":false,"fixedIn":null},{"text":"9.8.3.29","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.3","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.7","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.8","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.10","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.12","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.15","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.17","noFixRecorded":false,"fixedIn":null},{"text":"9.8.2.45","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.25","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.20","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.22","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.26","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.29","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.32","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.33","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.34","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.35","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.39","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.40","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.41","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.43","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.44","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.45","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.46","noFixRecorded":false,"fixedIn":null},{"text":"9.8.4.48","noFixRecorded":false,"fixedIn":null},{"text":"9.12.1","noFixRecorded":false,"fixedIn":null},{"text":"9.12.1.2","noFixRecorded":false,"fixedIn":null},{"text":"9.12.1.3","noFixRecorded":false,"fixedIn":null},{"text":"9.12.2","noFixRecorded":false,"fixedIn":null},{"text":"9.12.2.4","noFixRecorded":false,"fixedIn":null},{"text":"9.12.2.5","noFixRecorded":false,"fixedIn":null},{"text":"9.12.2.9","noFixRecorded":false,"fixedIn":null},{"text":"9.12.3","noFixRecorded":false,"fixedIn":null},{"text":"9.12.3.2","noFixRecorded":false,"fixedIn":null},{"text":"9.12.3.7","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4","noFixRecorded":false,"fixedIn":null},{"text":"9.12.3.12","noFixRecorded":false,"fixedIn":null},{"text":"9.12.3.9","noFixRecorded":false,"fixedIn":null},{"text":"9.12.2.1","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.2","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.4","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.7","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.10","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.13","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.8","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.18","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.24","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.26","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.29","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.30","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.35","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.37","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.38","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.39","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.40","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.41","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.47","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.48","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.50","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.52","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.54","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.55","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.56","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.58","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.62","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.65","noFixRecorded":false,"fixedIn":null},{"text":"9.12.4.67","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1.10","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1.6","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1.15","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1.19","noFixRecorded":false,"fixedIn":null},{"text":"9.14.1.30","noFixRecorded":false,"fixedIn":null},{"text":"9.14.2","noFixRecorded":false,"fixedIn":null},{"text":"9.14.2.4","noFixRecorded":false,"fixedIn":null},{"text":"9.14.2.8","noFixRecorded":false,"fixedIn":null},{"text":"9.14.2.13","noFixRecorded":false,"fixedIn":null},{"text":"9.14.2.15","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.1","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.9","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.11","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.13","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.18","noFixRecorded":false,"fixedIn":null},{"text":"9.14.3.15","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.6","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.7","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.12","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.13","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.14","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.15","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.17","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.22","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.23","noFixRecorded":false,"fixedIn":null},{"text":"9.14.4.24","noFixRecorded":false,"fixedIn":null},{"text":"9.16.1","noFixRecorded":false,"fixedIn":null},{"text":"9.16.1.28","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2.3","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2.7","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2.11","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2.13","noFixRecorded":false,"fixedIn":null},{"text":"9.16.2.14","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3.3","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3.14","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3.15","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3.19","noFixRecorded":false,"fixedIn":null},{"text":"9.16.3.23","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.9","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.14","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.18","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.19","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.27","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.38","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.39","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.42","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.48","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.55","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.57","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.61","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.62","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.67","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.70","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.71","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.76","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.82","noFixRecorded":false,"fixedIn":null},{"text":"9.16.4.84","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.7","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.9","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.10","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.11","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.13","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.15","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.20","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.30","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.33","noFixRecorded":false,"fixedIn":null},{"text":"9.17.1.39","noFixRecorded":false,"fixedIn":null},{"text":"9.18.1","noFixRecorded":false,"fixedIn":null},{"text":"9.18.1.3","noFixRecorded":false,"fixedIn":null},{"text":"9.18.2","noFixRecorded":false,"fixedIn":null},{"text":"9.18.2.5","noFixRecorded":false,"fixedIn":null},{"text":"9.18.2.7","noFixRecorded":false,"fixedIn":null},{"text":"9.18.2.8","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3.39","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3.46","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3.53","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3.55","noFixRecorded":false,"fixedIn":null},{"text":"9.18.3.56","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.5","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.8","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.22","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.24","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.29","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.34","noFixRecorded":false,"fixedIn":null},{"text":"9.18.4.40","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.5","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.9","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.12","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.18","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.22","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.24","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.27","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.28","noFixRecorded":false,"fixedIn":null},{"text":"9.19.1.31","noFixRecorded":false,"fixedIn":null},{"text":"9.20.1","noFixRecorded":false,"fixedIn":null},{"text":"9.20.1.5","noFixRecorded":false,"fixedIn":null},{"text":"9.20.2","noFixRecorded":false,"fixedIn":null},{"text":"9.20.2.10","noFixRecorded":false,"fixedIn":null},{"text":"9.20.2.21","noFixRecorded":false,"fixedIn":null},{"text":"9.20.2.22","noFixRecorded":false,"fixedIn":null},{"text":"9.20.3","noFixRecorded":false,"fixedIn":null},{"text":"9.20.3.4","noFixRecorded":false,"fixedIn":null},{"text":"9.22.1.1","noFixRecorded":false,"fixedIn":null},{"text":"9.22.1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.8.1 | 9.8.1.5 | 9.8.1.7 | 9.8.2 | 9.8.2.8 | 9.8.2.14 | 9.8.2.15 | 9.8.2.17 | 9.8.2.20 | 9.8.2.24 | 9.8.2.26 | 9.8.2.28 | 9.8.2.33 | 9.8.2.35 | 9.8.2.38 | 9.8.3.8 | 9.8.3.11 | 9.8.3.14 | 9.8.3.16 | 9.8.3.18 | 9.8.3.21 | 9.8.3 | 9.8.3.26 | 9.8.3.29 | 9.8.4 | 9.8.4.3 | 9.8.4.7 | 9.8.4.8 | 9.8.4.10 | 9.8.4.12 | 9.8.4.15 | 9.8.4.17 | 9.8.2.45 | 9.8.4.25 | 9.8.4.20 | 9.8.4.22 | 9.8.4.26 | 9.8.4.29 | 9.8.4.32 | 9.8.4.33 | 9.8.4.34 | 9.8.4.35 | 9.8.4.39 | 9.8.4.40 | 9.8.4.41 | 9.8.4.43 | 9.8.4.44 | 9.8.4.45 | 9.8.4.46 | 9.8.4.48 | 9.12.1 | 9.12.1.2 | 9.12.1.3 | 9.12.2 | 9.12.2.4 | 9.12.2.5 | 9.12.2.9 | 9.12.3 | 9.12.3.2 | 9.12.3.7 | 9.12.4 | 9.12.3.12 | 9.12.3.9 | 9.12.2.1 | 9.12.4.2 | 9.12.4.4 | 9.12.4.7 | 9.12.4.10 | 9.12.4.13 | 9.12.4.8 | 9.12.4.18 | 9.12.4.24 | 9.12.4.26 | 9.12.4.29 | 9.12.4.30 | 9.12.4.35 | 9.12.4.37 | 9.12.4.38 | 9.12.4.39 | 9.12.4.40 | 9.12.4.41 | 9.12.4.47 | 9.12.4.48 | 9.12.4.50 | 9.12.4.52 | 9.12.4.54 | 9.12.4.55 | 9.12.4.56 | 9.12.4.58 | 9.12.4.62 | 9.12.4.65 | 9.12.4.67 | 9.14.1 | 9.14.1.10 | 9.14.1.6 | 9.14.1.15 | 9.14.1.19 | 9.14.1.30 | 9.14.2 | 9.14.2.4 | 9.14.2.8 | 9.14.2.13 | 9.14.2.15 | 9.14.3 | 9.14.3.1 | 9.14.3.9 | 9.14.3.11 | 9.14.3.13 | 9.14.3.18 | 9.14.3.15 | 9.14.4 | 9.14.4.6 | 9.14.4.7 | 9.14.4.12 | 9.14.4.13 | 9.14.4.14 | 9.14.4.15 | 9.14.4.17 | 9.14.4.22 | 9.14.4.23 | 9.14.4.24 | 9.16.1 | 9.16.1.28 | 9.16.2 | 9.16.2.3 | 9.16.2.7 | 9.16.2.11 | 9.16.2.13 | 9.16.2.14 | 9.16.3 | 9.16.3.3 | 9.16.3.14 | 9.16.3.15 | 9.16.3.19 | 9.16.3.23 | 9.16.4 | 9.16.4.9 | 9.16.4.14 | 9.16.4.18 | 9.16.4.19 | 9.16.4.27 | 9.16.4.38 | 9.16.4.39 | 9.16.4.42 | 9.16.4.48 | 9.16.4.55 | 9.16.4.57 | 9.16.4.61 | 9.16.4.62 | 9.16.4.67 | 9.16.4.70 | 9.16.4.71 | 9.16.4.76 | 9.16.4.82 | 9.16.4.84 | 9.17.1 | 9.17.1.7 | 9.17.1.9 | 9.17.1.10 | 9.17.1.11 | 9.17.1.13 | 9.17.1.15 | 9.17.1.20 | 9.17.1.30 | 9.17.1.33 | 9.17.1.39 | 9.18.1 | 9.18.1.3 | 9.18.2 | 9.18.2.5 | 9.18.2.7 | 9.18.2.8 | 9.18.3 | 9.18.3.39 | 9.18.3.46 | 9.18.3.53 | 9.18.3.55 | 9.18.3.56 | 9.18.4 | 9.18.4.5 | 9.18.4.8 | 9.18.4.22 | 9.18.4.24 | 9.18.4.29 | 9.18.4.34 | 9.18.4.40 | 9.19.1 | 9.19.1.5 | 9.19.1.9 | 9.19.1.12 | 9.19.1.18 | 9.19.1.22 | 9.19.1.24 | 9.19.1.27 | 9.19.1.28 | 9.19.1.31 | 9.20.1 | 9.20.1.5 | 9.20.2 | 9.20.2.10 | 9.20.2.21 | 9.20.2.22 | 9.20.3 | 9.20.3.4 | 9.22.1.1 | 9.22.1.2","eol":null,"hubHref":"/vendor/cisco/cisco_secure_firewall_adaptive_security_appliance_asa_software"},{"vendor":"cisco","product":"cisco secure firewall threat defense (ftd) software","name":"Cisco Secure Firewall Threat Defense (FTD) Software","label":"cisco secure firewall threat defense (ftd) software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.2.3","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.1","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.2","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.3","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.4","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.5","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.6","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.7","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.8","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.10","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.11","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.9","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.12","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.13","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.14","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.15","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.16","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.17","noFixRecorded":false,"fixedIn":null},{"text":"6.2.3.18","noFixRecorded":false,"fixedIn":null},{"text":"6.6.0","noFixRecorded":false,"fixedIn":null},{"text":"6.6.0.1","noFixRecorded":false,"fixedIn":null},{"text":"6.6.1","noFixRecorded":false,"fixedIn":null},{"text":"6.6.3","noFixRecorded":false,"fixedIn":null},{"text":"6.6.4","noFixRecorded":false,"fixedIn":null},{"text":"6.6.5","noFixRecorded":false,"fixedIn":null},{"text":"6.6.5.1","noFixRecorded":false,"fixedIn":null},{"text":"6.6.5.2","noFixRecorded":false,"fixedIn":null},{"text":"6.6.7","noFixRecorded":false,"fixedIn":null},{"text":"6.6.7.1","noFixRecorded":false,"fixedIn":null},{"text":"6.6.7.2","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.1","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.3","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.2","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.4","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.5","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.6","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.7","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.8","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.9","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.10","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.11","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.12","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.13","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.14","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.15","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.16","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.17","noFixRecorded":false,"fixedIn":null},{"text":"6.4.0.18","noFixRecorded":false,"fixedIn":null},{"text":"7.0.0","noFixRecorded":false,"fixedIn":null},{"text":"7.0.0.1","noFixRecorded":false,"fixedIn":null},{"text":"7.0.1","noFixRecorded":false,"fixedIn":null},{"text":"7.0.1.1","noFixRecorded":false,"fixedIn":null},{"text":"7.0.2","noFixRecorded":false,"fixedIn":null},{"text":"7.0.2.1","noFixRecorded":false,"fixedIn":null},{"text":"7.0.3","noFixRecorded":false,"fixedIn":null},{"text":"7.0.4","noFixRecorded":false,"fixedIn":null},{"text":"7.0.5","noFixRecorded":false,"fixedIn":null},{"text":"7.0.6","noFixRecorded":false,"fixedIn":null},{"text":"7.0.6.1","noFixRecorded":false,"fixedIn":null},{"text":"7.0.6.2","noFixRecorded":false,"fixedIn":null},{"text":"7.0.6.3","noFixRecorded":false,"fixedIn":null},{"text":"7.0.7","noFixRecorded":false,"fixedIn":null},{"text":"7.0.8","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0.1","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0.2","noFixRecorded":false,"fixedIn":null},{"text":"7.1.0.3","noFixRecorded":false,"fixedIn":null},{"text":"7.2.0","noFixRecorded":false,"fixedIn":null},{"text":"7.2.0.1","noFixRecorded":false,"fixedIn":null},{"text":"7.2.1","noFixRecorded":false,"fixedIn":null},{"text":"7.2.2","noFixRecorded":false,"fixedIn":null},{"text":"7.2.3","noFixRecorded":false,"fixedIn":null},{"text":"7.2.4","noFixRecorded":false,"fixedIn":null},{"text":"7.2.4.1","noFixRecorded":false,"fixedIn":null},{"text":"7.2.5","noFixRecorded":false,"fixedIn":null},{"text":"7.2.5.1","noFixRecorded":false,"fixedIn":null},{"text":"7.2.6","noFixRecorded":false,"fixedIn":null},{"text":"7.2.7","noFixRecorded":false,"fixedIn":null},{"text":"7.2.5.2","noFixRecorded":false,"fixedIn":null},{"text":"7.2.8","noFixRecorded":false,"fixedIn":null},{"text":"7.2.8.1","noFixRecorded":false,"fixedIn":null},{"text":"7.3.0","noFixRecorded":false,"fixedIn":null},{"text":"7.3.1","noFixRecorded":false,"fixedIn":null},{"text":"7.3.1.1","noFixRecorded":false,"fixedIn":null},{"text":"7.3.1.2","noFixRecorded":false,"fixedIn":null},{"text":"7.4.0","noFixRecorded":false,"fixedIn":null},{"text":"7.4.1","noFixRecorded":false,"fixedIn":null},{"text":"7.4.1.1","noFixRecorded":false,"fixedIn":null},{"text":"7.4.2","noFixRecorded":false,"fixedIn":null},{"text":"7.4.2.1","noFixRecorded":false,"fixedIn":null},{"text":"7.4.2.2","noFixRecorded":false,"fixedIn":null},{"text":"7.4.2.3","noFixRecorded":false,"fixedIn":null},{"text":"7.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.2.3 | 6.2.3.1 | 6.2.3.2 | 6.2.3.3 | 6.2.3.4 | 6.2.3.5 | 6.2.3.6 | 6.2.3.7 | 6.2.3.8 | 6.2.3.10 | 6.2.3.11 | 6.2.3.9 | 6.2.3.12 | 6.2.3.13 | 6.2.3.14 | 6.2.3.15 | 6.2.3.16 | 6.2.3.17 | 6.2.3.18 | 6.6.0 | 6.6.0.1 | 6.6.1 | 6.6.3 | 6.6.4 | 6.6.5 | 6.6.5.1 | 6.6.5.2 | 6.6.7 | 6.6.7.1 | 6.6.7.2 | 6.4.0 | 6.4.0.1 | 6.4.0.3 | 6.4.0.2 | 6.4.0.4 | 6.4.0.5 | 6.4.0.6 | 6.4.0.7 | 6.4.0.8 | 6.4.0.9 | 6.4.0.10 | 6.4.0.11 | 6.4.0.12 | 6.4.0.13 | 6.4.0.14 | 6.4.0.15 | 6.4.0.16 | 6.4.0.17 | 6.4.0.18 | 7.0.0 | 7.0.0.1 | 7.0.1 | 7.0.1.1 | 7.0.2 | 7.0.2.1 | 7.0.3 | 7.0.4 | 7.0.5 | 7.0.6 | 7.0.6.1 | 7.0.6.2 | 7.0.6.3 | 7.0.7 | 7.0.8 | 7.1.0 | 7.1.0.1 | 7.1.0.2 | 7.1.0.3 | 7.2.0 | 7.2.0.1 | 7.2.1 | 7.2.2 | 7.2.3 | 7.2.4 | 7.2.4.1 | 7.2.5 | 7.2.5.1 | 7.2.6 | 7.2.7 | 7.2.5.2 | 7.2.8 | 7.2.8.1 | 7.3.0 | 7.3.1 | 7.3.1.1 | 7.3.1.2 | 7.4.0 | 7.4.1 | 7.4.1.1 | 7.4.2 | 7.4.2.1 | 7.4.2.2 | 7.4.2.3 | 7.6.0","eol":null,"hubHref":"/vendor/cisco/cisco_secure_firewall_threat_defense_ftd_software"},{"vendor":"cisco","product":"secure_firewall_threat_defense","name":"secure firewall threat defense","label":"secure_firewall_threat_defense","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.0.0, < 7.0.8.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.1.0, < 7.2.9","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.3.0, < 7.4.2.4","noFixRecorded":false,"fixedIn":null},{"text":"7.6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 7.0.0, < 7.0.8.1 | ≥ 7.1.0, < 7.2.9 | ≥ 7.3.0, < 7.4.2.4 | 7.6.0","eol":null,"hubHref":"/vendor/cisco/secure_firewall_threat_defense"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB","label":"sec.cloudapps.cisco.com/security/…","hostname":"sec.cloudapps.cisco.com","tags":["Vendor Advisory"]},{"url":"https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks","label":"sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks","hostname":"sec.cloudapps.cisco.com","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-09-25T16:12:14.308Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2025-09-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2025-09-26T00:00:00.000Z","label":"CISA remediation due","detail":"Apply mitigations per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2026-02-26T17:47:58.577Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:10:28.372Z","stale":false,"partial":false}}