CVE-2025-20333

Cisco is urging customers to patch two security flaws impacting the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software, which it said have been exploited in the wild. The zero-day vulnerabilities in question are listed below - CVE-2025-20333 (CVSS score: 9.9) - An improper validation of user-supplied input

Heute hat die CISA die Notfallrichtlinie ED 25-03: Identifizierung und Minderung potenzieller Sicherheitsrisiken von Cisco-Geräten herausgegeben, um Schwachstellen in Cisco Adaptive Security Appliances (ASA) und Cisco Firepower-Geräten zu beheben. Die CISA hat die Sicherheitslücken CVE-2025-20333 und CVE-2025-20362 in den Katalog bekannter ausgenutzter Sicherheitslücken aufgenommen. Der Beitrag CISA weist Bundesbehörden an, potenzielle Sicherheitsrisiken von Cisco-Geräten zu identifizieren und zu mindern erschien zuerst auf All About Security Das Online-Magazin zu Cybersecurity (Cybersicherheit). Ransomware, Phishing, IT-Sicherheit, Netzwerksicherheit, KI, Threats, DDoS, Identity & Access, Plattformsicherheit .

CISA has issued a new emergency directive ordering U.S. federal agencies to secure their Cisco firewall devices against two flaws that have been exploited in zero-day attacks. [...]

Cisco warned customers today to patch two zero-day vulnerabilities that are actively being exploited in attacks and impact the company's firewall software. [...]