All vulnerabilities
CVE-2025-20362

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat DefenseNetwork & edge
Open in ThreatlineRecord JSON
CVSS
6.5Medium
ExploitationExploited in the wildAdded to KEV 25 Sep 2025CISA KEV
Exploit odds (EPSS)87.1%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline26 Sep 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionThe KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 25 Sep 2025Added to CISA KEVCISA KEV
  2. 25 Sep 2025, 16:12 UTCPublishedCVE List

Public exploit code and templates 1

  • Scanner templateCisco Secure Firewall ASA & FTD - Authentication BypassNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorization vulnerability. This vulnerability could be chained with CVE-2025-20333.

Text from CVE List

Affected versions 60

  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1.5CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.1.7CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.8CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.14CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.15CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.17CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.20CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.24CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.26CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.28CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.33CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.35CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.2.38CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.8CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.11CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.14CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.16CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.18CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.21CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.26CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.3.29CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.3CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.7CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.8CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.10CVE List
  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwareaffected: 9.8.4.12CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.1CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.2CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.3CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.4CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.5CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.6CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.7CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.8CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.10CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.11CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.9CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.12CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.13CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.14CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.15CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.16CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.17CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.2.3.18CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.0CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.0.1CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.1CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.3CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.4CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.5CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.5.1CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.5.2CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.7CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.7.1CVE List
  • Cisco Secure Firewall Threat Defense (FTD) Softwareaffected: 6.6.7.2CVE List

References 7