CVE-2025-20243

A vulnerability in the management and VPN web servers of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability is due to improper validation of user-supplied input on an interface with VPN web services. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on an affected device. A successful exploit could allow the attacker to cause a DoS condition when the device reloads.

Scoring

Severity

HIGH

CVSS base score

8.6

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

EPSS probability

0.58%

CWE

CWE-835

Published

2025-08-14

Last modified

2026-03-12

Affected products

• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software
• Cisco Cisco Adaptive Security Appliance (ASA) Software

Weakness type

• CWE-835

Related vulnerabilities

• CVE-2026-88002 — Open WebUI: Any authenticated user can hang the server via a cyclic chat message history
• CVE-2026-88000 — Open WebUI: Any authenticated user can hang the server via message deletion in a cyclic chat tree
• CVE-2026-87013 — Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
• CVE-2026-6554 — infinte loop in libpcap before 1.10.7
• CVE-2026-85730 — smol-toml: Denial of Service via malformed TOML documents
• CVE-2026-78543 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
• CVE-2026-84309 — pypdf: Possible infinite loop for TreeObject.insert_child
• CVE-2026-82605 — BareBones BBEdit Lasso Language Tokenizer infinite loop

Markdown version · Browse all CVEs