DeutschShown in its original language — a full translation is planned for a future version.
Cisco ASA, FTD, IOS, IOS XE, IOS XR: Mehrere Schwachstellen
view advisory published 2025-09-25
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Cisco ASA (Adaptive Security Appliance), Cisco Secure Firewall Threat Defense, Cisco IOS, Cisco IOS XE und Cisco IOS XR ausnutzen, um die Authentisierung zu umgehen und beliebigen Programmcode mit Administratorrechten auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20363US | — | — | ||
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Ci… | ||||
| CVE-2025-20362US | high8.6OT critical | KEV | ||
Update: On November 5, 2025, Cisco became aware of a new attack variant against devices running Cisco Secure ASA Software or Cisco Secure FTD Software releases that are affected by… | ||||
| CVE-2025-20333US | —OT critical | KEV | ||
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an aut… | ||||
02
references
External citations — patches, advisories, analysis.
- Cisco Security Advisory cisco-sa-asaftd-webvpn-YROOTUW vom 2025-09-25external
- Cisco Security Advisory cisco-sa-asaftd-webvpn-z5xP8EUB vom 2025-09-25external
- Cisco Security Advisory cisco-sa-http-code-exec-WmfP3h3O vom 2025-09-25external
- WID-SEC-W-2025-2142 - CSAF Versionself
- WID-SEC-2025-2142 - Portal Versionself
- CISA Known Exploited Vulnerabilities Catalog vom 2025-09-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan