Main Vulnerability Database Vulnerabilities #VU116118

Missing authorization in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Cisco Secure Firewall Threat Defense (FTD) - CVE-2025-20362

Published: September 25, 2025

Vulnerability identifier: #VU116118

CSH Severity: High

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-20362

CWE-ID: CWE-862

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to bypass authorization checks.

The vulnerability exists due to improper validation of user-supplied input within the VPN Web Server. A remote attacker can send specially crafted HTTP request to a targeted web server on a device and access a restricted URL without authentication.

Note, the vulnerability is being exploited in the wild.

Affected software

Cisco Secure Firewall Adaptive Security Appliance (ASA)
Cisco Secure Firewall Threat Defense (FTD)

How to mitigate CVE-2025-20362

Install update from vendor's website.

External References

Related Security Bulletins