{"history":[{"alert":0,"cve":"CVE-2025-20333","id":22751,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.72037, \"percentile\": 0.99438}"},{"alert":0,"cve":"CVE-2025-20333","id":20371,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.72037, \"percentile\": 0.99435}"},{"alert":0,"cve":"CVE-2025-20333","id":18340,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.72037, \"percentile\": 0.99434}"},{"alert":0,"cve":"CVE-2025-20333","id":16404,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.72037, \"percentile\": 0.99434}"},{"alert":0,"cve":"CVE-2025-20333","id":14382,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.72037, \"percentile\": 0.99434}"},{"alert":0,"cve":"CVE-2025-20333","id":12164,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.72037, \"percentile\": 0.99433}"},{"alert":0,"cve":"CVE-2025-20333","id":10150,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.72037, \"percentile\": 0.99433}"},{"alert":0,"cve":"CVE-2025-20333","id":7699,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.72037, \"percentile\": 0.99432}"},{"alert":1,"cve":"CVE-2025-20333","id":5968,"kind":"cna","observed_at":1793744401,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2025-20333\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-09-26T03:55:14.003793Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-09-25\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-02-26T17:47:58.577Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"vendor-advisory\"], \"url\": \"https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks\"}, {\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-09-25T00:00:00.000Z\", \"value\": \"CVE-2025-20333 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.8.1\"}, {\"status\": \"affected\", \"version\": \"9.8.1.5\"}, {\"status\": \"affected\", \"version\": \"9.8.1.7\"}, {\"status\": \"affected\", \"version\": \"9.8.2\"}, {\"status\": \"affected\", \"version\": \"9.8.2.8\"}, {\"status\": \"affected\", \"version\": \"9.8.2.14\"}, {\"status\": \"affected\", \"version\": \"9.8.2.15\"}, {\"status\": \"affected\", \"version\": \"9.8.2.17\"}, {\"status\": \"affected\", \"version\": \"9.8.2.20\"}, {\"status\": \"affected\", \"version\": \"9.8.2.24\"}, {\"status\": \"affected\", \"version\": \"9.8.2.26\"}, {\"status\": \"affected\", \"version\": \"9.8.2.28\"}, {\"status\": \"affected\", \"version\": \"9.8.2.33\"}, {\"status\": \"affected\", \"version\": \"9.8.2.35\"}, {\"status\": \"affected\", \"version\": \"9.8.2.38\"}, {\"status\": \"affected\", \"version\": \"9.8.3.8\"}, {\"status\": \"affected\", \"version\": \"9.8.3.11\"}, {\"status\": \"affected\", \"version\": \"9.8.3.14\"}, {\"status\": \"affected\", \"version\": \"9.8.3.16\"}, {\"status\": \"affected\", \"version\": \"9.8.3.18\"}, {\"status\": \"affected\", \"version\": \"9.8.3.21\"}, {\"status\": \"affected\", \"version\": \"9.8.3\"}, {\"status\": \"affected\", \"version\": \"9.8.3.26\"}, {\"status\": \"affected\", \"version\": \"9.8.3.29\"}, {\"status\": \"affected\", \"version\": \"9.8.4\"}, {\"status\": \"affected\", \"version\": \"9.8.4.3\"}, {\"status\": \"affected\", \"version\": \"9.8.4.7\"}, {\"status\": \"affected\", \"version\": \"9.8.4.8\"}, {\"status\": \"affected\", \"version\": \"9.8.4.10\"}, {\"status\": \"affected\", \"version\": \"9.8.4.12\"}, {\"status\": \"affected\", \"version\": \"9.8.4.15\"}, {\"status\": \"affected\", \"version\": \"9.8.4.17\"}, {\"status\": \"affected\", \"version\": \"9.8.2.45\"}, {\"status\": \"affected\", \"version\": \"9.8.4.25\"}, {\"status\": \"affected\", \"version\": \"9.8.4.20\"}, {\"status\": \"affected\", \"version\": \"9.8.4.22\"}, {\"status\": \"affected\", \"version\": \"9.8.4.26\"}, {\"status\": \"affected\", \"version\": \"9.8.4.29\"}, {\"status\": \"affected\", \"version\": \"9.8.4.32\"}, {\"status\": \"affected\", \"version\": \"9.8.4.33\"}, {\"status\": \"affected\", \"version\": \"9.8.4.34\"}, {\"status\": \"affected\", \"version\": \"9.8.4.35\"}, {\"status\": \"affected\", \"version\": \"9.8.4.39\"}, {\"status\": \"affected\", \"version\": \"9.8.4.40\"}, {\"status\": \"affected\", \"version\": \"9.8.4.41\"}, {\"status\": \"affected\", \"version\": \"9.8.4.43\"}, {\"status\": \"affected\", \"version\": \"9.8.4.44\"}, {\"status\": \"affected\", \"version\": \"9.8.4.45\"}, {\"status\": \"affected\", \"version\": \"9.8.4.46\"}, {\"status\": \"affected\", \"version\": \"9.8.4.48\"}, {\"status\": \"affected\", \"version\": \"9.12.1\"}, {\"status\": \"affected\", \"version\": \"9.12.1.2\"}, {\"status\": \"affected\", \"version\": \"9.12.1.3\"}, {\"status\": \"affected\", \"version\": \"9.12.2\"}, {\"status\": \"affected\", \"version\": \"9.12.2.4\"}, {\"status\": \"affected\", \"version\": \"9.12.2.5\"}, {\"status\": \"affected\", \"version\": \"9.12.2.9\"}, {\"status\": \"affected\", \"version\": \"9.12.3\"}, {\"status\": \"affected\", \"version\": \"9.12.3.2\"}, {\"status\": \"affected\", \"version\": \"9.12.3.7\"}, {\"status\": \"affected\", \"version\": \"9.12.4\"}, {\"status\": \"affected\", \"version\": \"9.12.3.12\"}, {\"status\": \"affected\", \"version\": \"9.12.3.9\"}, {\"status\": \"affected\", \"version\": \"9.12.2.1\"}, {\"status\": \"affected\", \"version\": \"9.12.4.2\"}, {\"status\": \"affected\", \"version\": \"9.12.4.4\"}, {\"status\": \"affected\", \"version\": \"9.12.4.7\"}, {\"status\": \"affected\", \"version\": \"9.12.4.10\"}, {\"status\": \"affected\", \"version\": \"9.12.4.13\"}, {\"status\": \"affected\", \"version\": \"9.12.4.8\"}, {\"status\": \"affected\", \"version\": \"9.12.4.18\"}, {\"status\": \"affected\", \"version\": \"9.12.4.24\"}, {\"status\": \"affected\", \"version\": \"9.12.4.26\"}, {\"status\": \"affected\", \"version\": \"9.12.4.29\"}, {\"status\": \"affected\", \"version\": \"9.12.4.30\"}, {\"status\": \"affected\", \"version\": \"9.12.4.35\"}, {\"status\": \"affected\", \"version\": \"9.12.4.37\"}, {\"status\": \"affected\", \"version\": \"9.12.4.38\"}, {\"status\": \"affected\", \"version\": \"9.12.4.39\"}, {\"status\": \"affected\", \"version\": \"9.12.4.40\"}, {\"status\": \"affected\", \"version\": \"9.12.4.41\"}, {\"status\": \"affected\", \"version\": \"9.12.4.47\"}, {\"status\": \"affected\", \"version\": \"9.12.4.48\"}, {\"status\": \"affected\", \"version\": \"9.12.4.50\"}, {\"status\": \"affected\", \"version\": \"9.12.4.52\"}, {\"status\": \"affected\", \"version\": \"9.12.4.54\"}, {\"status\": \"affected\", \"version\": \"9.12.4.55\"}, {\"status\": \"affected\", \"version\": \"9.12.4.56\"}, {\"status\": \"affected\", \"version\": \"9.12.4.58\"}, {\"status\": \"affected\", \"version\": \"9.12.4.62\"}, {\"status\": \"affected\", \"version\": \"9.12.4.65\"}, {\"status\": \"affected\", \"version\": \"9.12.4.67\"}, {\"status\": \"affected\", \"version\": \"9.14.1\"}, {\"status\": \"affected\", \"version\": \"9.14.1.10\"}, {\"status\": \"affected\", \"version\": \"9.14.1.6\"}, {\"status\": \"affected\", \"version\": \"9.14.1.15\"}, {\"status\": \"affected\", \"version\": \"9.14.1.19\"}, {\"status\": \"affected\", \"version\": \"9.14.1.30\"}, {\"status\": \"affected\", \"version\": \"9.14.2\"}, {\"status\": \"affected\", \"version\": \"9.14.2.4\"}, {\"status\": \"affected\", \"version\": \"9.14.2.8\"}, {\"status\": \"affected\", \"version\": \"9.14.2.13\"}, {\"status\": \"affected\", \"version\": \"9.14.2.15\"}, {\"status\": \"affected\", \"version\": \"9.14.3\"}, {\"status\": \"affected\", \"version\": \"9.14.3.1\"}, {\"status\": \"affected\", \"version\": \"9.14.3.9\"}, {\"status\": \"affected\", \"version\": \"9.14.3.11\"}, {\"status\": \"affected\", \"version\": \"9.14.3.13\"}, {\"status\": \"affected\", \"version\": \"9.14.3.18\"}, {\"status\": \"affected\", \"version\": \"9.14.3.15\"}, {\"status\": \"affected\", \"version\": \"9.14.4\"}, {\"status\": \"affected\", \"version\": \"9.14.4.6\"}, {\"status\": \"affected\", \"version\": \"9.14.4.7\"}, {\"status\": \"affected\", \"version\": \"9.14.4.12\"}, {\"status\": \"affected\", \"version\": \"9.14.4.13\"}, {\"status\": \"affected\", \"version\": \"9.14.4.14\"}, {\"status\": \"affected\", \"version\": \"9.14.4.15\"}, {\"status\": \"affected\", \"version\": \"9.14.4.17\"}, {\"status\": \"affected\", \"version\": \"9.14.4.22\"}, {\"status\": \"affected\", \"version\": \"9.14.4.23\"}, {\"status\": \"affected\", \"version\": \"9.14.4.24\"}, {\"status\": \"affected\", \"version\": \"9.16.1\"}, {\"status\": \"affected\", \"version\": \"9.16.1.28\"}, {\"status\": \"affected\", \"version\": \"9.16.2\"}, {\"status\": \"affected\", \"version\": \"9.16.2.3\"}, {\"status\": \"affected\", \"version\": \"9.16.2.7\"}, {\"status\": \"affected\", \"version\": \"9.16.2.11\"}, {\"status\": \"affected\", \"version\": \"9.16.2.13\"}, {\"status\": \"affected\", \"version\": \"9.16.2.14\"}, {\"status\": \"affected\", \"version\": \"9.16.3\"}, {\"status\": \"affected\", \"version\": \"9.16.3.3\"}, {\"status\": \"affected\", \"version\": \"9.16.3.14\"}, {\"status\": \"affected\", \"version\": \"9.16.3.15\"}, {\"status\": \"affected\", \"version\": \"9.16.3.19\"}, {\"status\": \"affected\", \"version\": \"9.16.3.23\"}, {\"status\": \"affected\", \"version\": \"9.16.4\"}, {\"status\": \"affected\", \"version\": \"9.16.4.9\"}, {\"status\": \"affected\", \"version\": \"9.16.4.14\"}, {\"status\": \"affected\", \"version\": \"9.16.4.18\"}, {\"status\": \"affected\", \"version\": \"9.16.4.19\"}, {\"status\": \"affected\", \"version\": \"9.16.4.27\"}, {\"status\": \"affected\", \"version\": \"9.16.4.38\"}, {\"status\": \"affected\", \"version\": \"9.16.4.39\"}, {\"status\": \"affected\", \"version\": \"9.16.4.42\"}, {\"status\": \"affected\", \"version\": \"9.16.4.48\"}, {\"status\": \"affected\", \"version\": \"9.16.4.55\"}, {\"status\": \"affected\", \"version\": \"9.16.4.57\"}, {\"status\": \"affected\", \"version\": \"9.16.4.61\"}, {\"status\": \"affected\", \"version\": \"9.16.4.62\"}, {\"status\": \"affected\", \"version\": \"9.16.4.67\"}, {\"status\": \"affected\", \"version\": \"9.16.4.70\"}, {\"status\": \"affected\", \"version\": \"9.16.4.71\"}, {\"status\": \"affected\", \"version\": \"9.16.4.76\"}, {\"status\": \"affected\", \"version\": \"9.16.4.82\"}, {\"status\": \"affected\", \"version\": \"9.16.4.84\"}, {\"status\": \"affected\", \"version\": \"9.17.1\"}, {\"status\": \"affected\", \"version\": \"9.17.1.7\"}, {\"status\": \"affected\", \"version\": \"9.17.1.9\"}, {\"status\": \"affected\", \"version\": \"9.17.1.10\"}, {\"status\": \"affected\", \"version\": \"9.17.1.11\"}, {\"status\": \"affected\", \"version\": \"9.17.1.13\"}, {\"status\": \"affected\", \"version\": \"9.17.1.15\"}, {\"status\": \"affected\", \"version\": \"9.17.1.20\"}, {\"status\": \"affected\", \"version\": \"9.17.1.30\"}, {\"status\": \"affected\", \"version\": \"9.17.1.33\"}, {\"status\": \"affected\", \"version\": \"9.17.1.39\"}, {\"status\": \"affected\", \"version\": \"9.18.1\"}, {\"status\": \"affected\", \"version\": \"9.18.1.3\"}, {\"status\": \"affected\", \"version\": \"9.18.2\"}, {\"status\": \"affected\", \"version\": \"9.18.2.5\"}, {\"status\": \"affected\", \"version\": \"9.18.2.7\"}, {\"status\": \"affected\", \"version\": \"9.18.2.8\"}, {\"status\": \"affected\", \"version\": \"9.18.3\"}, {\"status\": \"affected\", \"version\": \"9.18.3.39\"}, {\"status\": \"affected\", \"version\": \"9.18.3.46\"}, {\"status\": \"affected\", \"version\": \"9.18.3.53\"}, {\"status\": \"affected\", \"version\": \"9.18.3.55\"}, {\"status\": \"affected\", \"version\": \"9.18.3.56\"}, {\"status\": \"affected\", \"version\": \"9.18.4\"}, {\"status\": \"affected\", \"version\": \"9.18.4.5\"}, {\"status\": \"affected\", \"version\": \"9.18.4.8\"}, {\"status\": \"affected\", \"version\": \"9.18.4.22\"}, {\"status\": \"affected\", \"version\": \"9.18.4.24\"}, {\"status\": \"affected\", \"version\": \"9.18.4.29\"}, {\"status\": \"affected\", \"version\": \"9.18.4.34\"}, {\"status\": \"affected\", \"version\": \"9.18.4.40\"}, {\"status\": \"affected\", \"version\": \"9.19.1\"}, {\"status\": \"affected\", \"version\": \"9.19.1.5\"}, {\"status\": \"affected\", \"version\": \"9.19.1.9\"}, {\"status\": \"affected\", \"version\": \"9.19.1.12\"}, {\"status\": \"affected\", \"version\": \"9.19.1.18\"}, {\"status\": \"affected\", \"version\": \"9.19.1.22\"}, {\"status\": \"affected\", \"version\": \"9.19.1.24\"}, {\"status\": \"affected\", \"version\": \"9.19.1.27\"}, {\"status\": \"affected\", \"version\": \"9.19.1.28\"}, {\"status\": \"affected\", \"version\": \"9.19.1.31\"}, {\"status\": \"affected\", \"version\": \"9.20.1\"}, {\"status\": \"affected\", \"version\": \"9.20.1.5\"}, {\"status\": \"affected\", \"version\": \"9.20.2\"}, {\"status\": \"affected\", \"version\": \"9.20.2.10\"}, {\"status\": \"affected\", \"version\": \"9.20.2.21\"}, {\"status\": \"affected\", \"version\": \"9.20.2.22\"}, {\"status\": \"affected\", \"version\": \"9.20.3\"}, {\"status\": \"affected\", \"version\": \"9.20.3.4\"}, {\"status\": \"affected\", \"version\": \"9.22.1.1\"}, {\"status\": \"affected\", \"version\": \"9.22.1.2\"}]}, {\"product\": \"Cisco Secure Firewall Threat Defense (FTD) Software\", \"vendor\": \"Cisco\", \"versions\": [{\"status\": \"affected\", \"version\": \"6.2.3\"}, {\"status\": \"affected\", \"version\": \"6.2.3.1\"}, {\"status\": \"affected\", \"version\": \"6.2.3.2\"}, {\"status\": \"affected\", \"version\": \"6.2.3.3\"}, {\"status\": \"affected\", \"version\": \"6.2.3.4\"}, {\"status\": \"affected\", \"version\": \"6.2.3.5\"}, {\"status\": \"affected\", \"version\": \"6.2.3.6\"}, {\"status\": \"affected\", \"version\": \"6.2.3.7\"}, {\"status\": \"affected\", \"version\": \"6.2.3.8\"}, {\"status\": \"affected\", \"version\": \"6.2.3.10\"}, {\"status\": \"affected\", \"version\": \"6.2.3.11\"}, {\"status\": \"affected\", \"version\": \"6.2.3.9\"}, {\"status\": \"affected\", \"version\": \"6.2.3.12\"}, {\"status\": \"affected\", \"version\": \"6.2.3.13\"}, {\"status\": \"affected\", \"version\": \"6.2.3.14\"}, {\"status\": \"affected\", \"version\": \"6.2.3.15\"}, {\"status\": \"affected\", \"version\": \"6.2.3.16\"}, {\"status\": \"affected\", \"version\": \"6.2.3.17\"}, {\"status\": \"affected\", \"version\": \"6.2.3.18\"}, {\"status\": \"affected\", \"version\": \"6.6.0\"}, {\"status\": \"affected\", \"version\": \"6.6.0.1\"}, {\"status\": \"affected\", \"version\": \"6.6.1\"}, {\"status\": \"affected\", \"version\": \"6.6.3\"}, {\"status\": \"affected\", \"version\": \"6.6.4\"}, {\"status\": \"affected\", \"version\": \"6.6.5\"}, {\"status\": \"affected\", \"version\": \"6.6.5.1\"}, {\"status\": \"affected\", \"version\": \"6.6.5.2\"}, {\"status\": \"affected\", \"version\": \"6.6.7\"}, {\"status\": \"affected\", \"version\": \"6.6.7.1\"}, {\"status\": \"affected\", \"version\": \"6.6.7.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0\"}, {\"status\": \"affected\", \"version\": \"6.4.0.1\"}, {\"status\": \"affected\", \"version\": \"6.4.0.3\"}, {\"status\": \"affected\", \"version\": \"6.4.0.2\"}, {\"status\": \"affected\", \"version\": \"6.4.0.4\"}, {\"status\": \"affected\", \"version\": \"6.4.0.5\"}, {\"status\": \"affected\", \"version\": \"6.4.0.6\"}, {\"status\": \"affected\", \"version\": \"6.4.0.7\"}, {\"status\": \"affected\", \"version\": \"6.4.0.8\"}, {\"status\": \"affected\", \"version\": \"6.4.0.9\"}, {\"status\": \"affected\", \"version\": \"6.4.0.10\"}, {\"status\": \"affected\", \"version\": \"6.4.0.11\"}, {\"status\": \"affected\", \"version\": \"6.4.0.12\"}, {\"status\": \"affected\", \"version\": \"6.4.0.13\"}, {\"status\": \"affected\", \"version\": \"6.4.0.14\"}, {\"status\": \"affected\", \"version\": \"6.4.0.15\"}, {\"status\": \"affected\", \"version\": \"6.4.0.16\"}, {\"status\": \"affected\", \"version\": \"6.4.0.17\"}, {\"status\": \"affected\", \"version\": \"6.4.0.18\"}, {\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1\"}, {\"status\": \"affected\", \"version\": \"7.0.1.1\"}, {\"status\": \"affected\", \"version\": \"7.0.2\"}, {\"status\": \"affected\", \"version\": \"7.0.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.3\"}, {\"status\": \"affected\", \"version\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"7.0.6.1\"}, {\"status\": \"affected\", \"version\": \"7.0.6.2\"}, {\"status\": \"affected\", \"version\": \"7.0.6.3\"}, {\"status\": \"affected\", \"version\": \"7.0.7\"}, {\"status\": \"affected\", \"version\": \"7.0.8\"}, {\"status\": \"affected\", \"version\": \"7.1.0\"}, {\"status\": \"affected\", \"version\": \"7.1.0.1\"}, {\"status\": \"affected\", \"version\": \"7.1.0.2\"}, {\"status\": \"affected\", \"version\": \"7.1.0.3\"}, {\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.2.0.1\"}, {\"status\": \"affected\", \"version\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.2.4\"}, {\"status\": \"affected\", \"version\": \"7.2.4.1\"}, {\"status\": \"affected\", \"version\": \"7.2.5\"}, {\"status\": \"affected\", \"version\": \"7.2.5.1\"}, {\"status\": \"affected\", \"version\": \"7.2.6\"}, {\"status\": \"affected\", \"version\": \"7.2.7\"}, {\"status\": \"affected\", \"version\": \"7.2.5.2\"}, {\"status\": \"affected\", \"version\": \"7.2.8\"}, {\"status\": \"affected\", \"version\": \"7.2.8.1\"}, {\"status\": \"affected\", \"version\": \"7.3.0\"}, {\"status\": \"affected\", \"version\": \"7.3.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.1\"}, {\"status\": \"affected\", \"version\": \"7.3.1.2\"}, {\"status\": \"affected\", \"version\": \"7.4.0\"}, {\"status\": \"affected\", \"version\": \"7.4.1\"}, {\"status\": \"affected\", \"version\": \"7.4.1.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.1\"}, {\"status\": \"affected\", \"version\": \"7.4.2.2\"}, {\"status\": \"affected\", \"version\": \"7.4.2.3\"}, {\"status\": \"affected\", \"version\": \"7.6.0\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\\r\\n\\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.9, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"scope\": \"CHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"cvssV3_1\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-120\", \"description\": \"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\", \"lang\": \"en\", \"type\": \"cwe\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-11-05T21:03:29.299Z\", \"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\"}, \"references\": [{\"name\": \"cisco-sa-asaftd-webvpn-z5xP8EUB\", \"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB\"}], \"source\": {\"advisory\": \"cisco-sa-asaftd-webvpn-z5xP8EUB\", \"defects\": [\"CSCwq79831\"], \"discovery\": \"EXTERNAL\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"assignerShortName\": \"cisco\", \"cveId\": \"CVE-2025-20333\", \"datePublished\": \"2025-09-25T16:12:14.308Z\", \"dateReserved\": \"2024-10-10T19:15:13.255Z\", \"dateUpdated\": \"2026-02-26T17:47:58.577Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2025-20333","id":5476,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.72037, \"percentile\": 0.99431}"},{"alert":0,"cve":"CVE-2025-20333","id":3258,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.71207, \"percentile\": 0.99409}"},{"alert":1,"cve":"CVE-2025-20333","id":351,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2025-20333\", \"cwes\": [\"CWE-120\"], \"dateAdded\": \"2025-09-25\", \"dueDate\": \"2025-09-26\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;    https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333\", \"product\": \"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense\", \"requiredAction\": \"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor\\u2019s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.\", \"shortDescription\": \"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.\", \"vendorProject\": \"Cisco\", \"vulnerabilityName\": \"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability\"}"}],"record":{"affected":[{"product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.8.1"},{"status":"affected","version":"9.8.1.5"},{"status":"affected","version":"9.8.1.7"},{"status":"affected","version":"9.8.2"},{"status":"affected","version":"9.8.2.8"},{"status":"affected","version":"9.8.2.14"},{"status":"affected","version":"9.8.2.15"},{"status":"affected","version":"9.8.2.17"},{"status":"affected","version":"9.8.2.20"},{"status":"affected","version":"9.8.2.24"},{"status":"affected","version":"9.8.2.26"},{"status":"affected","version":"9.8.2.28"},{"status":"affected","version":"9.8.2.33"},{"status":"affected","version":"9.8.2.35"},{"status":"affected","version":"9.8.2.38"},{"status":"affected","version":"9.8.3.8"},{"status":"affected","version":"9.8.3.11"},{"status":"affected","version":"9.8.3.14"},{"status":"affected","version":"9.8.3.16"},{"status":"affected","version":"9.8.3.18"},{"status":"affected","version":"9.8.3.21"},{"status":"affected","version":"9.8.3"},{"status":"affected","version":"9.8.3.26"},{"status":"affected","version":"9.8.3.29"},{"status":"affected","version":"9.8.4"},{"status":"affected","version":"9.8.4.3"},{"status":"affected","version":"9.8.4.7"},{"status":"affected","version":"9.8.4.8"},{"status":"affected","version":"9.8.4.10"},{"status":"affected","version":"9.8.4.12"},{"status":"affected","version":"9.8.4.15"},{"status":"affected","version":"9.8.4.17"},{"status":"affected","version":"9.8.2.45"},{"status":"affected","version":"9.8.4.25"},{"status":"affected","version":"9.8.4.20"},{"status":"affected","version":"9.8.4.22"},{"status":"affected","version":"9.8.4.26"},{"status":"affected","version":"9.8.4.29"},{"status":"affected","version":"9.8.4.32"},{"status":"affected","version":"9.8.4.33"},{"status":"affected","version":"9.8.4.34"},{"status":"affected","version":"9.8.4.35"},{"status":"affected","version":"9.8.4.39"},{"status":"affected","version":"9.8.4.40"},{"status":"affected","version":"9.8.4.41"},{"status":"affected","version":"9.8.4.43"},{"status":"affected","version":"9.8.4.44"},{"status":"affected","version":"9.8.4.45"},{"status":"affected","version":"9.8.4.46"},{"status":"affected","version":"9.8.4.48"},{"status":"affected","version":"9.12.1"},{"status":"affected","version":"9.12.1.2"},{"status":"affected","version":"9.12.1.3"},{"status":"affected","version":"9.12.2"},{"status":"affected","version":"9.12.2.4"},{"status":"affected","version":"9.12.2.5"},{"status":"affected","version":"9.12.2.9"},{"status":"affected","version":"9.12.3"},{"status":"affected","version":"9.12.3.2"},{"status":"affected","version":"9.12.3.7"},{"status":"affected","version":"9.12.4"},{"status":"affected","version":"9.12.3.12"},{"status":"affected","version":"9.12.3.9"},{"status":"affected","version":"9.12.2.1"},{"status":"affected","version":"9.12.4.2"},{"status":"affected","version":"9.12.4.4"},{"status":"affected","version":"9.12.4.7"},{"status":"affected","version":"9.12.4.10"},{"status":"affected","version":"9.12.4.13"},{"status":"affected","version":"9.12.4.8"},{"status":"affected","version":"9.12.4.18"},{"status":"affected","version":"9.12.4.24"},{"status":"affected","version":"9.12.4.26"},{"status":"affected","version":"9.12.4.29"},{"status":"affected","version":"9.12.4.30"},{"status":"affected","version":"9.12.4.35"},{"status":"affected","version":"9.12.4.37"},{"status":"affected","version":"9.12.4.38"},{"status":"affected","version":"9.12.4.39"},{"status":"affected","version":"9.12.4.40"},{"status":"affected","version":"9.12.4.41"},{"status":"affected","version":"9.12.4.47"},{"status":"affected","version":"9.12.4.48"},{"status":"affected","version":"9.12.4.50"},{"status":"affected","version":"9.12.4.52"},{"status":"affected","version":"9.12.4.54"},{"status":"affected","version":"9.12.4.55"},{"status":"affected","version":"9.12.4.56"},{"status":"affected","version":"9.12.4.58"},{"status":"affected","version":"9.12.4.62"},{"status":"affected","version":"9.12.4.65"},{"status":"affected","version":"9.12.4.67"},{"status":"affected","version":"9.14.1"},{"status":"affected","version":"9.14.1.10"},{"status":"affected","version":"9.14.1.6"},{"status":"affected","version":"9.14.1.15"},{"status":"affected","version":"9.14.1.19"},{"status":"affected","version":"9.14.1.30"},{"status":"affected","version":"9.14.2"},{"status":"affected","version":"9.14.2.4"},{"status":"affected","version":"9.14.2.8"},{"status":"affected","version":"9.14.2.13"},{"status":"affected","version":"9.14.2.15"},{"status":"affected","version":"9.14.3"},{"status":"affected","version":"9.14.3.1"},{"status":"affected","version":"9.14.3.9"},{"status":"affected","version":"9.14.3.11"},{"status":"affected","version":"9.14.3.13"},{"status":"affected","version":"9.14.3.18"},{"status":"affected","version":"9.14.3.15"},{"status":"affected","version":"9.14.4"},{"status":"affected","version":"9.14.4.6"},{"status":"affected","version":"9.14.4.7"},{"status":"affected","version":"9.14.4.12"},{"status":"affected","version":"9.14.4.13"},{"status":"affected","version":"9.14.4.14"},{"status":"affected","version":"9.14.4.15"},{"status":"affected","version":"9.14.4.17"},{"status":"affected","version":"9.14.4.22"},{"status":"affected","version":"9.14.4.23"},{"status":"affected","version":"9.14.4.24"},{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.16.3"},{"status":"affected","version":"9.16.3.3"},{"status":"affected","version":"9.16.3.14"},{"status":"affected","version":"9.16.3.15"},{"status":"affected","version":"9.16.3.19"},{"status":"affected","version":"9.16.3.23"},{"status":"affected","version":"9.16.4"},{"status":"affected","version":"9.16.4.9"},{"status":"affected","version":"9.16.4.14"},{"status":"affected","version":"9.16.4.18"},{"status":"affected","version":"9.16.4.19"},{"status":"affected","version":"9.16.4.27"},{"status":"affected","version":"9.16.4.38"},{"status":"affected","version":"9.16.4.39"},{"status":"affected","version":"9.16.4.42"},{"status":"affected","version":"9.16.4.48"},{"status":"affected","version":"9.16.4.55"},{"status":"affected","version":"9.16.4.57"},{"status":"affected","version":"9.16.4.61"},{"status":"affected","version":"9.16.4.62"},{"status":"affected","version":"9.16.4.67"},{"status":"affected","version":"9.16.4.70"},{"status":"affected","version":"9.16.4.71"},{"status":"affected","version":"9.16.4.76"},{"status":"affected","version":"9.16.4.82"},{"status":"affected","version":"9.16.4.84"},{"status":"affected","version":"9.17.1"},{"status":"affected","version":"9.17.1.7"},{"status":"affected","version":"9.17.1.9"},{"status":"affected","version":"9.17.1.10"},{"status":"affected","version":"9.17.1.11"},{"status":"affected","version":"9.17.1.13"},{"status":"affected","version":"9.17.1.15"},{"status":"affected","version":"9.17.1.20"},{"status":"affected","version":"9.17.1.30"},{"status":"affected","version":"9.17.1.33"},{"status":"affected","version":"9.17.1.39"},{"status":"affected","version":"9.18.1"},{"status":"affected","version":"9.18.1.3"},{"status":"affected","version":"9.18.2"},{"status":"affected","version":"9.18.2.5"},{"status":"affected","version":"9.18.2.7"},{"status":"affected","version":"9.18.2.8"},{"status":"affected","version":"9.18.3"},{"status":"affected","version":"9.18.3.39"},{"status":"affected","version":"9.18.3.46"},{"status":"affected","version":"9.18.3.53"},{"status":"affected","version":"9.18.3.55"},{"status":"affected","version":"9.18.3.56"},{"status":"affected","version":"9.18.4"},{"status":"affected","version":"9.18.4.5"},{"status":"affected","version":"9.18.4.8"},{"status":"affected","version":"9.18.4.22"},{"status":"affected","version":"9.18.4.24"},{"status":"affected","version":"9.18.4.29"},{"status":"affected","version":"9.18.4.34"},{"status":"affected","version":"9.18.4.40"},{"status":"affected","version":"9.19.1"},{"status":"affected","version":"9.19.1.5"},{"status":"affected","version":"9.19.1.9"},{"status":"affected","version":"9.19.1.12"},{"status":"affected","version":"9.19.1.18"},{"status":"affected","version":"9.19.1.22"},{"status":"affected","version":"9.19.1.24"},{"status":"affected","version":"9.19.1.27"},{"status":"affected","version":"9.19.1.28"},{"status":"affected","version":"9.19.1.31"},{"status":"affected","version":"9.20.1"},{"status":"affected","version":"9.20.1.5"},{"status":"affected","version":"9.20.2"},{"status":"affected","version":"9.20.2.10"},{"status":"affected","version":"9.20.2.21"},{"status":"affected","version":"9.20.2.22"},{"status":"affected","version":"9.20.3"},{"status":"affected","version":"9.20.3.4"},{"status":"affected","version":"9.22.1.1"},{"status":"affected","version":"9.22.1.2"}]},{"product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"6.2.3"},{"status":"affected","version":"6.2.3.1"},{"status":"affected","version":"6.2.3.2"},{"status":"affected","version":"6.2.3.3"},{"status":"affected","version":"6.2.3.4"},{"status":"affected","version":"6.2.3.5"},{"status":"affected","version":"6.2.3.6"},{"status":"affected","version":"6.2.3.7"},{"status":"affected","version":"6.2.3.8"},{"status":"affected","version":"6.2.3.10"},{"status":"affected","version":"6.2.3.11"},{"status":"affected","version":"6.2.3.9"},{"status":"affected","version":"6.2.3.12"},{"status":"affected","version":"6.2.3.13"},{"status":"affected","version":"6.2.3.14"},{"status":"affected","version":"6.2.3.15"},{"status":"affected","version":"6.2.3.16"},{"status":"affected","version":"6.2.3.17"},{"status":"affected","version":"6.2.3.18"},{"status":"affected","version":"6.6.0"},{"status":"affected","version":"6.6.0.1"},{"status":"affected","version":"6.6.1"},{"status":"affected","version":"6.6.3"},{"status":"affected","version":"6.6.4"},{"status":"affected","version":"6.6.5"},{"status":"affected","version":"6.6.5.1"},{"status":"affected","version":"6.6.5.2"},{"status":"affected","version":"6.6.7"},{"status":"affected","version":"6.6.7.1"},{"status":"affected","version":"6.6.7.2"},{"status":"affected","version":"6.4.0"},{"status":"affected","version":"6.4.0.1"},{"status":"affected","version":"6.4.0.3"},{"status":"affected","version":"6.4.0.2"},{"status":"affected","version":"6.4.0.4"},{"status":"affected","version":"6.4.0.5"},{"status":"affected","version":"6.4.0.6"},{"status":"affected","version":"6.4.0.7"},{"status":"affected","version":"6.4.0.8"},{"status":"affected","version":"6.4.0.9"},{"status":"affected","version":"6.4.0.10"},{"status":"affected","version":"6.4.0.11"},{"status":"affected","version":"6.4.0.12"},{"status":"affected","version":"6.4.0.13"},{"status":"affected","version":"6.4.0.14"},{"status":"affected","version":"6.4.0.15"},{"status":"affected","version":"6.4.0.16"},{"status":"affected","version":"6.4.0.17"},{"status":"affected","version":"6.4.0.18"},{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.0.2.1"},{"status":"affected","version":"7.0.3"},{"status":"affected","version":"7.0.4"},{"status":"affected","version":"7.0.5"},{"status":"affected","version":"7.0.6"},{"status":"affected","version":"7.0.6.1"},{"status":"affected","version":"7.0.6.2"},{"status":"affected","version":"7.0.6.3"},{"status":"affected","version":"7.0.7"},{"status":"affected","version":"7.0.8"},{"status":"affected","version":"7.1.0"},{"status":"affected","version":"7.1.0.1"},{"status":"affected","version":"7.1.0.2"},{"status":"affected","version":"7.1.0.3"},{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.2.2"},{"status":"affected","version":"7.2.3"},{"status":"affected","version":"7.2.4"},{"status":"affected","version":"7.2.4.1"},{"status":"affected","version":"7.2.5"},{"status":"affected","version":"7.2.5.1"},{"status":"affected","version":"7.2.6"},{"status":"affected","version":"7.2.7"},{"status":"affected","version":"7.2.5.2"},{"status":"affected","version":"7.2.8"},{"status":"affected","version":"7.2.8.1"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.3.1"},{"status":"affected","version":"7.3.1.1"},{"status":"affected","version":"7.3.1.2"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.4.1"},{"status":"affected","version":"7.4.1.1"},{"status":"affected","version":"7.4.2"},{"status":"affected","version":"7.4.2.1"},{"status":"affected","version":"7.4.2.2"},{"status":"affected","version":"7.4.2.3"},{"status":"affected","version":"7.6.0"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-20333","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-09-26T03:55:14.003793Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-09-25","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-02-26T17:47:58.577Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["vendor-advisory"],"url":"https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks"},{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333"}],"timeline":[{"lang":"en","time":"2025-09-25T00:00:00.000Z","value":"CVE-2025-20333 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Cisco Secure Firewall Adaptive Security Appliance (ASA) Software","vendor":"Cisco","versions":[{"status":"affected","version":"9.8.1"},{"status":"affected","version":"9.8.1.5"},{"status":"affected","version":"9.8.1.7"},{"status":"affected","version":"9.8.2"},{"status":"affected","version":"9.8.2.8"},{"status":"affected","version":"9.8.2.14"},{"status":"affected","version":"9.8.2.15"},{"status":"affected","version":"9.8.2.17"},{"status":"affected","version":"9.8.2.20"},{"status":"affected","version":"9.8.2.24"},{"status":"affected","version":"9.8.2.26"},{"status":"affected","version":"9.8.2.28"},{"status":"affected","version":"9.8.2.33"},{"status":"affected","version":"9.8.2.35"},{"status":"affected","version":"9.8.2.38"},{"status":"affected","version":"9.8.3.8"},{"status":"affected","version":"9.8.3.11"},{"status":"affected","version":"9.8.3.14"},{"status":"affected","version":"9.8.3.16"},{"status":"affected","version":"9.8.3.18"},{"status":"affected","version":"9.8.3.21"},{"status":"affected","version":"9.8.3"},{"status":"affected","version":"9.8.3.26"},{"status":"affected","version":"9.8.3.29"},{"status":"affected","version":"9.8.4"},{"status":"affected","version":"9.8.4.3"},{"status":"affected","version":"9.8.4.7"},{"status":"affected","version":"9.8.4.8"},{"status":"affected","version":"9.8.4.10"},{"status":"affected","version":"9.8.4.12"},{"status":"affected","version":"9.8.4.15"},{"status":"affected","version":"9.8.4.17"},{"status":"affected","version":"9.8.2.45"},{"status":"affected","version":"9.8.4.25"},{"status":"affected","version":"9.8.4.20"},{"status":"affected","version":"9.8.4.22"},{"status":"affected","version":"9.8.4.26"},{"status":"affected","version":"9.8.4.29"},{"status":"affected","version":"9.8.4.32"},{"status":"affected","version":"9.8.4.33"},{"status":"affected","version":"9.8.4.34"},{"status":"affected","version":"9.8.4.35"},{"status":"affected","version":"9.8.4.39"},{"status":"affected","version":"9.8.4.40"},{"status":"affected","version":"9.8.4.41"},{"status":"affected","version":"9.8.4.43"},{"status":"affected","version":"9.8.4.44"},{"status":"affected","version":"9.8.4.45"},{"status":"affected","version":"9.8.4.46"},{"status":"affected","version":"9.8.4.48"},{"status":"affected","version":"9.12.1"},{"status":"affected","version":"9.12.1.2"},{"status":"affected","version":"9.12.1.3"},{"status":"affected","version":"9.12.2"},{"status":"affected","version":"9.12.2.4"},{"status":"affected","version":"9.12.2.5"},{"status":"affected","version":"9.12.2.9"},{"status":"affected","version":"9.12.3"},{"status":"affected","version":"9.12.3.2"},{"status":"affected","version":"9.12.3.7"},{"status":"affected","version":"9.12.4"},{"status":"affected","version":"9.12.3.12"},{"status":"affected","version":"9.12.3.9"},{"status":"affected","version":"9.12.2.1"},{"status":"affected","version":"9.12.4.2"},{"status":"affected","version":"9.12.4.4"},{"status":"affected","version":"9.12.4.7"},{"status":"affected","version":"9.12.4.10"},{"status":"affected","version":"9.12.4.13"},{"status":"affected","version":"9.12.4.8"},{"status":"affected","version":"9.12.4.18"},{"status":"affected","version":"9.12.4.24"},{"status":"affected","version":"9.12.4.26"},{"status":"affected","version":"9.12.4.29"},{"status":"affected","version":"9.12.4.30"},{"status":"affected","version":"9.12.4.35"},{"status":"affected","version":"9.12.4.37"},{"status":"affected","version":"9.12.4.38"},{"status":"affected","version":"9.12.4.39"},{"status":"affected","version":"9.12.4.40"},{"status":"affected","version":"9.12.4.41"},{"status":"affected","version":"9.12.4.47"},{"status":"affected","version":"9.12.4.48"},{"status":"affected","version":"9.12.4.50"},{"status":"affected","version":"9.12.4.52"},{"status":"affected","version":"9.12.4.54"},{"status":"affected","version":"9.12.4.55"},{"status":"affected","version":"9.12.4.56"},{"status":"affected","version":"9.12.4.58"},{"status":"affected","version":"9.12.4.62"},{"status":"affected","version":"9.12.4.65"},{"status":"affected","version":"9.12.4.67"},{"status":"affected","version":"9.14.1"},{"status":"affected","version":"9.14.1.10"},{"status":"affected","version":"9.14.1.6"},{"status":"affected","version":"9.14.1.15"},{"status":"affected","version":"9.14.1.19"},{"status":"affected","version":"9.14.1.30"},{"status":"affected","version":"9.14.2"},{"status":"affected","version":"9.14.2.4"},{"status":"affected","version":"9.14.2.8"},{"status":"affected","version":"9.14.2.13"},{"status":"affected","version":"9.14.2.15"},{"status":"affected","version":"9.14.3"},{"status":"affected","version":"9.14.3.1"},{"status":"affected","version":"9.14.3.9"},{"status":"affected","version":"9.14.3.11"},{"status":"affected","version":"9.14.3.13"},{"status":"affected","version":"9.14.3.18"},{"status":"affected","version":"9.14.3.15"},{"status":"affected","version":"9.14.4"},{"status":"affected","version":"9.14.4.6"},{"status":"affected","version":"9.14.4.7"},{"status":"affected","version":"9.14.4.12"},{"status":"affected","version":"9.14.4.13"},{"status":"affected","version":"9.14.4.14"},{"status":"affected","version":"9.14.4.15"},{"status":"affected","version":"9.14.4.17"},{"status":"affected","version":"9.14.4.22"},{"status":"affected","version":"9.14.4.23"},{"status":"affected","version":"9.14.4.24"},{"status":"affected","version":"9.16.1"},{"status":"affected","version":"9.16.1.28"},{"status":"affected","version":"9.16.2"},{"status":"affected","version":"9.16.2.3"},{"status":"affected","version":"9.16.2.7"},{"status":"affected","version":"9.16.2.11"},{"status":"affected","version":"9.16.2.13"},{"status":"affected","version":"9.16.2.14"},{"status":"affected","version":"9.16.3"},{"status":"affected","version":"9.16.3.3"},{"status":"affected","version":"9.16.3.14"},{"status":"affected","version":"9.16.3.15"},{"status":"affected","version":"9.16.3.19"},{"status":"affected","version":"9.16.3.23"},{"status":"affected","version":"9.16.4"},{"status":"affected","version":"9.16.4.9"},{"status":"affected","version":"9.16.4.14"},{"status":"affected","version":"9.16.4.18"},{"status":"affected","version":"9.16.4.19"},{"status":"affected","version":"9.16.4.27"},{"status":"affected","version":"9.16.4.38"},{"status":"affected","version":"9.16.4.39"},{"status":"affected","version":"9.16.4.42"},{"status":"affected","version":"9.16.4.48"},{"status":"affected","version":"9.16.4.55"},{"status":"affected","version":"9.16.4.57"},{"status":"affected","version":"9.16.4.61"},{"status":"affected","version":"9.16.4.62"},{"status":"affected","version":"9.16.4.67"},{"status":"affected","version":"9.16.4.70"},{"status":"affected","version":"9.16.4.71"},{"status":"affected","version":"9.16.4.76"},{"status":"affected","version":"9.16.4.82"},{"status":"affected","version":"9.16.4.84"},{"status":"affected","version":"9.17.1"},{"status":"affected","version":"9.17.1.7"},{"status":"affected","version":"9.17.1.9"},{"status":"affected","version":"9.17.1.10"},{"status":"affected","version":"9.17.1.11"},{"status":"affected","version":"9.17.1.13"},{"status":"affected","version":"9.17.1.15"},{"status":"affected","version":"9.17.1.20"},{"status":"affected","version":"9.17.1.30"},{"status":"affected","version":"9.17.1.33"},{"status":"affected","version":"9.17.1.39"},{"status":"affected","version":"9.18.1"},{"status":"affected","version":"9.18.1.3"},{"status":"affected","version":"9.18.2"},{"status":"affected","version":"9.18.2.5"},{"status":"affected","version":"9.18.2.7"},{"status":"affected","version":"9.18.2.8"},{"status":"affected","version":"9.18.3"},{"status":"affected","version":"9.18.3.39"},{"status":"affected","version":"9.18.3.46"},{"status":"affected","version":"9.18.3.53"},{"status":"affected","version":"9.18.3.55"},{"status":"affected","version":"9.18.3.56"},{"status":"affected","version":"9.18.4"},{"status":"affected","version":"9.18.4.5"},{"status":"affected","version":"9.18.4.8"},{"status":"affected","version":"9.18.4.22"},{"status":"affected","version":"9.18.4.24"},{"status":"affected","version":"9.18.4.29"},{"status":"affected","version":"9.18.4.34"},{"status":"affected","version":"9.18.4.40"},{"status":"affected","version":"9.19.1"},{"status":"affected","version":"9.19.1.5"},{"status":"affected","version":"9.19.1.9"},{"status":"affected","version":"9.19.1.12"},{"status":"affected","version":"9.19.1.18"},{"status":"affected","version":"9.19.1.22"},{"status":"affected","version":"9.19.1.24"},{"status":"affected","version":"9.19.1.27"},{"status":"affected","version":"9.19.1.28"},{"status":"affected","version":"9.19.1.31"},{"status":"affected","version":"9.20.1"},{"status":"affected","version":"9.20.1.5"},{"status":"affected","version":"9.20.2"},{"status":"affected","version":"9.20.2.10"},{"status":"affected","version":"9.20.2.21"},{"status":"affected","version":"9.20.2.22"},{"status":"affected","version":"9.20.3"},{"status":"affected","version":"9.20.3.4"},{"status":"affected","version":"9.22.1.1"},{"status":"affected","version":"9.22.1.2"}]},{"product":"Cisco Secure Firewall Threat Defense (FTD) Software","vendor":"Cisco","versions":[{"status":"affected","version":"6.2.3"},{"status":"affected","version":"6.2.3.1"},{"status":"affected","version":"6.2.3.2"},{"status":"affected","version":"6.2.3.3"},{"status":"affected","version":"6.2.3.4"},{"status":"affected","version":"6.2.3.5"},{"status":"affected","version":"6.2.3.6"},{"status":"affected","version":"6.2.3.7"},{"status":"affected","version":"6.2.3.8"},{"status":"affected","version":"6.2.3.10"},{"status":"affected","version":"6.2.3.11"},{"status":"affected","version":"6.2.3.9"},{"status":"affected","version":"6.2.3.12"},{"status":"affected","version":"6.2.3.13"},{"status":"affected","version":"6.2.3.14"},{"status":"affected","version":"6.2.3.15"},{"status":"affected","version":"6.2.3.16"},{"status":"affected","version":"6.2.3.17"},{"status":"affected","version":"6.2.3.18"},{"status":"affected","version":"6.6.0"},{"status":"affected","version":"6.6.0.1"},{"status":"affected","version":"6.6.1"},{"status":"affected","version":"6.6.3"},{"status":"affected","version":"6.6.4"},{"status":"affected","version":"6.6.5"},{"status":"affected","version":"6.6.5.1"},{"status":"affected","version":"6.6.5.2"},{"status":"affected","version":"6.6.7"},{"status":"affected","version":"6.6.7.1"},{"status":"affected","version":"6.6.7.2"},{"status":"affected","version":"6.4.0"},{"status":"affected","version":"6.4.0.1"},{"status":"affected","version":"6.4.0.3"},{"status":"affected","version":"6.4.0.2"},{"status":"affected","version":"6.4.0.4"},{"status":"affected","version":"6.4.0.5"},{"status":"affected","version":"6.4.0.6"},{"status":"affected","version":"6.4.0.7"},{"status":"affected","version":"6.4.0.8"},{"status":"affected","version":"6.4.0.9"},{"status":"affected","version":"6.4.0.10"},{"status":"affected","version":"6.4.0.11"},{"status":"affected","version":"6.4.0.12"},{"status":"affected","version":"6.4.0.13"},{"status":"affected","version":"6.4.0.14"},{"status":"affected","version":"6.4.0.15"},{"status":"affected","version":"6.4.0.16"},{"status":"affected","version":"6.4.0.17"},{"status":"affected","version":"6.4.0.18"},{"status":"affected","version":"7.0.0"},{"status":"affected","version":"7.0.0.1"},{"status":"affected","version":"7.0.1"},{"status":"affected","version":"7.0.1.1"},{"status":"affected","version":"7.0.2"},{"status":"affected","version":"7.0.2.1"},{"status":"affected","version":"7.0.3"},{"status":"affected","version":"7.0.4"},{"status":"affected","version":"7.0.5"},{"status":"affected","version":"7.0.6"},{"status":"affected","version":"7.0.6.1"},{"status":"affected","version":"7.0.6.2"},{"status":"affected","version":"7.0.6.3"},{"status":"affected","version":"7.0.7"},{"status":"affected","version":"7.0.8"},{"status":"affected","version":"7.1.0"},{"status":"affected","version":"7.1.0.1"},{"status":"affected","version":"7.1.0.2"},{"status":"affected","version":"7.1.0.3"},{"status":"affected","version":"7.2.0"},{"status":"affected","version":"7.2.0.1"},{"status":"affected","version":"7.2.1"},{"status":"affected","version":"7.2.2"},{"status":"affected","version":"7.2.3"},{"status":"affected","version":"7.2.4"},{"status":"affected","version":"7.2.4.1"},{"status":"affected","version":"7.2.5"},{"status":"affected","version":"7.2.5.1"},{"status":"affected","version":"7.2.6"},{"status":"affected","version":"7.2.7"},{"status":"affected","version":"7.2.5.2"},{"status":"affected","version":"7.2.8"},{"status":"affected","version":"7.2.8.1"},{"status":"affected","version":"7.3.0"},{"status":"affected","version":"7.3.1"},{"status":"affected","version":"7.3.1.1"},{"status":"affected","version":"7.3.1.2"},{"status":"affected","version":"7.4.0"},{"status":"affected","version":"7.4.1"},{"status":"affected","version":"7.4.1.1"},{"status":"affected","version":"7.4.2"},{"status":"affected","version":"7.4.2.1"},{"status":"affected","version":"7.4.2.2"},{"status":"affected","version":"7.4.2.3"},{"status":"affected","version":"7.6.0"}]}],"descriptions":[{"lang":"en","value":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device."}],"exploits":[{"lang":"en","value":"The Cisco Product Security Incident Response Team (PSIRT) is aware of attempted exploitation of this vulnerability. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"cvssV3_1"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","description":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","lang":"en","type":"cwe"}]}],"providerMetadata":{"dateUpdated":"2025-11-05T21:03:29.299Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"cisco-sa-asaftd-webvpn-z5xP8EUB","url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB"}],"source":{"advisory":"cisco-sa-asaftd-webvpn-z5xP8EUB","defects":["CSCwq79831"],"discovery":"EXTERNAL"}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2025-20333","datePublished":"2025-09-25T16:12:14.308Z","dateReserved":"2024-10-10T19:15:13.255Z","dateUpdated":"2026-02-26T17:47:58.577Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794198001,"cve":"CVE-2025-20333","description":"A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.\r\n\r This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of the affected device.","epss":{"date":"2026-11-12","epss":0.72037,"percentile":0.99438},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2025-20333","cwes":["CWE-120"],"dateAdded":"2025-09-25","dueDate":"2025-09-26","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;    https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor\u2019s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","shortDescription":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.","vendorProject":"Cisco","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability"},"kev_checked":1794522003,"products":"Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Cisco Secure Firewall Threat Defense (FTD) Software","references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB","https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-20333"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","provider":"cisco","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}