Vulnerabilityhigh
UAT-4356's Targeting of Cisco Firepower Devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-20333+1 related CVE | Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server | 9.9 group max | 72% | KEV | KEV |
From the original article
4 min read at blog.talosintelligence.com
Cisco Talos is aware of UAT-4356 's continued active targeting of Cisco Firepower devices’ Firepower eXtensible Operating System (FXOS). UAT-4356 exploited n-day vulnerabilities ( CVE-2025-20333 and CVE-2025-20362 ) to gain unauthorized access to vulnerable devices, where the threat actor deployed their custom-built backdoor dubbed “FIRESTARTER.”
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.