Approximately 50,000 Cisco ASA and FTD appliances are vulnerable to actively exploited security flaws CVE-2025-20333 and CVE-2025-20362, allowing remote code execution and restricted URL access. Urgent mitigation is required as many devices remain exposed worldwide, with authorities issuing emergency directives. #CVE202520333 #CVE202520362 #CiscoASA #ThreatActors
Keypoints
- Two critical vulnerabilities in Cisco ASA and FTD devices are actively exploited by hackers.
- Exploits enable remote code execution and unauthorized VPN access without authentication.
- Over 48,800 vulnerable devices are still exposed publicly, mainly in the US and Europe.
- Authorities like CISA have issued emergency directives for immediate action and patching.
- Malware such as ‘Line Viper’ and ‘RayInitiator’ have been linked to recent attack campaigns.