VulnerabilitycriticalExploited in the wild

"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)

Help Net Securityby @zeljkazorzNov 13, 2025 · 00:00 UTC (Nov 13, 2025)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-20333 CVE-2025-20362 CVE-2025-12480 CVE-2025-62215 CVE-2025-9242

Tags: cve-2025-20333 cve-2025-20362 cve-2025-12480 cve-2025-62215 cve-2025-9242 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-12480	Improper Access Control in Gladinet Triofox Exploited in the Wild	9.1	96%	KEVPoC	Nov 10, 2025 KEV Nov 12, 2025
CVE-2025-20333 +1 related CVE CVE-2025-20362	Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server	9.9 group max	71%	KEV	Sep 25, 2025 KEV Sep 25, 2025
CVE-2025-62215	Local Privilege Escalation via Race Condition in Microsoft Windows Kernel	7.0	4%	KEVPoC	Nov 11, 2025 KEV Nov 12, 2025
CVE-2025-9242	Out-of-Bounds Write in WatchGuard Fireware OS iked Enables Unauthenticated RCE	9.3	92%	KEVPoC	Sep 17, 2025 KEV Nov 12, 2025

From the original article

2 min read at helpnetsecurity.com

CISA has ordered US federal agencies to fully address two actively exploited vulnerabilities (CVE-2025-20333, CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) and Firepower firewalls.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.