Known vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.16.1.25

Version: 9.16.1.25
Software CPE: cpe:2.3:h:cisco_systems:Cisco Adaptive Security Appliance (ASA):*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 1
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Cisco Secure Firewall Adaptive Security Appliance (ASA) version 9.16.1.25 Cisco Secure Firewall Adaptive Security Appliance (ASA) 9.16.1.25 is affected by 18 vulnerabilities: 3 high, 14 medium, 1 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150750 - Improper Access Control
CVE-2026-20332
CWE-284 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150751 - Incorrect Comparison
CVE-2026-20333
CWE-697 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150752 - Improper Adherence to Coding Standards
CVE-2026-20334
CWE-710 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150753 - Incorrect Calculation
CVE-2026-20335
CWE-682 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150754 - Improper control of a resource through its lifetime
CVE-2026-20336
CWE-664 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150747 - Improper Check or Handling of Exceptional Conditions
CVE-2026-20329
CWE-703 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150748 - Improper Neutralization
CVE-2026-20330
CWE-707 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU150749 - Protection Mechanism Failure
CVE-2026-20331
CWE-693 Medium
No
No
9.16.4.103, 9.18.4.94, 9.20.4.49, 9.22.3.26, 9.23.1.47, 9.24.1.26 17.09.2026 SB20260917252
#VU141542 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')
CVE-2026-20349
CWE-244 High
No
Exploited
9.16 89.18.4.50, 9.18 89.18.4.50, 9.20.4.235, 9.22.3.191, 9.23.1.211, 9.24.1.221 12.08.2026 SB2026081227
#VU116119 - Buffer overflow
CVE-2025-20333
CWE-120 High
No
Exploited
9.16.4.85, 9.17.1.45, 9.18.4.47, 9.19.1.37, 9.20.3.7, 9.22.1.3 25.09.2025 SB2025092570
#VU99312 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-20485
CWE-94 Low
No
No
9.16.4.61, 9.17.1.45, 9.18.4.24, 9.19.1.28, 9.20.2.21, 9.22.1.1 24.10.2024 SB2024102414
#VU99293 - Use of Insufficiently Random Values
CVE-2024-20331
CWE-330 Medium
No
No
9.12.4.67, 9.16.4.55, 9.17.1.39, 9.18.4.22, 9.19.1.28, 9.20.2.10, 9.22.1.1 24.10.2024 SB2024102402
#VU99291 - Missing Release of Resource after Effective Lifetime
CVE-2024-20481
CWE-772 High
No
Exploited
9.16.4.62, 9.17.1.45, 9.18.4.29, 9.19.1.37, 9.20.2.22, 9.22.1.1 23.10.2024 SB2024102373
#VU99289 - Access of Memory Location After End of Buffer
CVE-2024-20402
CWE-788 Medium
No
No
9.16.4.62, 9.18.4.34, 9.20.1, 9.22.1.1 23.10.2024 SB2024102366
#VU64596 - Insufficient Verification of Data Authenticity
CVE-2022-20829
CWE-345 Medium
Public exploit available
No
9.18.2 22.06.2022 SB2022062234
#VU62667 - Improper input validation
CVE-2022-20745
CWE-20 Medium
No
No
9.12.4.35, 9.14.3.13, 9.15.1.21, 9.16.2.7 27.04.2022 SB2022042739
#VU62666 - Resource Management Errors
CVE-2022-20715
CWE-399 Medium
No
No
9.16.2.11, 9.17.1 27.04.2022 SB2022042737
SB2022042738
#VU62665 - Heap-based Buffer Overflow
CVE-2022-20737
CWE-122 Medium
No
No
9.12.4.38, 9.14.4, 9.15.1.21, 9.16.2.14, 9.17.1.7 27.04.2022 SB2022042736