Exploit / PoCcritical
Too many Cisco ASA firewalls still unsecure despite zero-day attack alerts
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2025-20333+1 related CVE | Authenticated Buffer Overflow RCE in Cisco ASA/FTD VPN Web Server | 9.9 group max | 71% | KEV | KEV |
| CVE-2025-20352 | SNMP Stack Buffer Overflow in Cisco IOS and IOS XE Enables DoS and Root RCE | 7.7 | 42% | KEV | KEV |
From the original article
2 min read at helpnetsecurity.com
Despite Cisco and various cybersecurity agencies warning about attackers actively exploting zero-day vulnerabilities (CVE-2025-20333 and CVE-2025-20362) in Cisco Adaptive Security Appliances (ASA) for months, there are still around 48,000 vulnerable appliances out there. The number is provided by the Shadowserver Foundation, which is scanning for internet-facing vulnerable Cisco ASA/FTD instances every day.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.