CVE-2025-20333

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Adaptive Security Appliance (ASA) (affected versions not specified) Cisco Secure Firewall Threat Defense (FTD) (affected versions not specified)

Description A buffer overflow issue exists in the VPN web server of Cisco Secure Firewall ASA and FTD software due to improper validation of user-supplied input in HTTP(S) requests. An authenticated remote attacker with valid VPN user credentials could exploit this by sending specially crafted HTTP requests to an affected device. Successful exploitation allows the execution of arbitrary code with root privileges, which could lead to the complete compromise of the device. Real-world incidents of this issue being exploited have been recorded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.