Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.8.2.45 when installed on Cisco ASA 5500-X Series Firewalls

productUS

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical12high14medium0low

updated 2026-10-28

vulnerabilities (47)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-20362US	high8.6OT critical	87.1% (100th)	KEV	no fix	2025-09-25	—
CVE-2025-20333US	—OT critical	71.2% (99th)	KEV	no fix	2025-09-25	—
CVE-2024-20353US	high8.6OT critical	69.8% (99th)	KEV	no fix	2024-04-24	—
CVE-2023-20269US	critical9.1OT critical	26.6% (98th)	KEV	no fix	2023-09-06	—
CVE-2024-20359US	medium6.0OT critical	18.8% (97th)	KEV	no fix	2024-04-24	—
CVE-2024-20481US	medium5.8OT critical	15.9% (97th)	KEV	no fix	2024-10-23	—
CVE-2022-20829US	high7.2OT elevated	3.51% (89th)	Exploit	no fix	2022-06-24	—
CVE-2022-20759US	high8.8	28.7% (98th)	—	no fix	2022-05-03	—
CVE-2025-20363US	—	6.92% (94th)	—	no fix	2025-09-25	—
CVE-2022-20713US	medium6.1	1.90% (80th)	—	no fix	2022-08-10	—
CVE-2022-20760US	high7.5	1.61% (76th)	—	no fix	2022-05-03	—
CVE-2022-20745US	high7.5	1.50% (74th)	—	no fix	2022-05-03	—
CVE-2022-20737US	high7.1	1.18% (68th)	—	no fix	2022-05-03	—
CVE-2022-20947US	high7.5	0.95% (61st)	—	no fix	2022-11-15	—
CVE-2025-20133US	—	0.78% (56th)	—	no fix	2025-08-14	—
CVE-2022-20928US	medium5.8OT elevated	0.76% (55th)	—	no fix	2022-11-15	—
CVE-2023-20107US	high7.5	0.72% (54th)	—	no fix	2023-03-23	—
CVE-2025-20225US	—	0.71% (54th)	—	no fix	2025-08-14	—
CVE-2025-20224US	—	0.71% (54th)	—	no fix	2025-08-14	—
CVE-2022-20795US	high7.5OT elevated	0.70% (53rd)	—	no fix	2022-04-21	—
CVE-2024-20358US	medium6.7	0.70% (53rd)	—	no fix	2024-04-24	—
CVE-2023-20081US	medium5.9	0.68% (52nd)	—	no fix	2023-03-23	—
CVE-2025-20263US	—	0.68% (52nd)	—	no fix	2025-08-14	—
CVE-2024-20331US	medium5.9OT elevated	0.68% (52nd)	—	no fix	2024-10-23	—
CVE-2023-20086US	high8.6	0.65% (51st)	—	no fix	2023-11-01	—
CVE-2025-20136US	—	0.64% (50th)	—	no fix	2025-08-14	—
CVE-2025-20239US	—	0.62% (49th)	—	no fix	2025-08-14	—
CVE-2025-20243US	—	0.61% (49th)	—	no fix	2025-08-14	—
CVE-2025-20182US	—	0.56% (46th)	—	no fix	2025-05-07	—
CVE-2024-20493US	medium5.3	0.55% (46th)	—	no fix	2024-10-23	—
CVE-2025-20244US	—	0.54% (45th)	—	no fix	2025-08-14	—
CVE-2024-20402US	high8.6	0.53% (44th)	—	no fix	2024-10-23	—
CVE-2024-20299US	—	0.48% (41st)	—	no fix	2024-10-23	—
CVE-2024-20297US	—	0.48% (41st)	—	no fix	2024-10-23	—
CVE-2025-20253US	—	0.47% (40th)	—	no fix	2025-08-14	—
CVE-2025-20251US	—	0.47% (40th)	—	no fix	2025-08-14	—
CVE-2024-20408US	—	0.45% (39th)	—	no fix	2024-10-23	—
CVE-2024-20341US	medium6.1	0.43% (37th)	—	no fix	2024-10-23	—
CVE-2023-20275US	medium4.3OT elevated	0.42% (36th)	—	no fix	2023-12-12	—
CVE-2024-20382US	medium6.1	0.41% (35th)	—	no fix	2024-10-23	—
CVE-2026-20012US	—	0.36% (30th)	—	no fix	2026-03-25	—
CVE-2024-20355US	medium5.0OT elevated	0.33% (26th)	—	no fix	2024-05-22	—
CVE-2023-20247US	medium4.3OT elevated	0.29% (22nd)	—	no fix	2023-11-01	—
CVE-2025-20135US	—	0.20% (10th)	—	no fix	2025-08-14	—
CVE-2024-20485US	medium6.7	0.19% (8th)	—	no fix	2024-10-23	—
CVE-2025-20237US	—	0.15% (4th)	—	no fix	2025-08-14	—
CVE-2025-20238US	—	0.15% (4th)	—	no fix	2025-08-14	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime6 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')4 CVEs
CWE-122Heap-based Buffer Overflow3 CVEs
CWE-1287Improper Validation of Specified Type of Input3 CVEs
CWE-345Insufficient Verification of Data Authenticity3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-290Authentication Bypass by Spoofing2 CVEs

sources (1)

Which sources assert this record, and when.

USCisco PSIRT (CSAF)47 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan