Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities

Update: Implementation Guidance for Emergency Directive on Cisco ASA and Firepower Device Vulnerabilities ↗ source

November 12, 2025 CISA Alert

Source: https://www.cisa.gov/news-events/alerts/2025/11/12/update-implementation-guidance-emergency-directive-cisco-asa-and-firepower-device-vulnerabilities

Summary

Emergency Directive 25-03: Identify and Mitigate Potential Compromise of Cisco Devices , issued on Sept. 25, identified known vulnerabilities CVE-2025-20333 and CVE-2025-20362 , and mandated immediate action to mitigate risks. Threat actors continue to target these devices, posing significant risk to all organizations. See Emergency Directive 25-03 Implementation Guidance and Temporary Risk Mitigation Guidance for Agencies in the Process of ED 25-03 Compliance for detailed recommendations and CISA’s RayDetect scanner to examine ASA core dumps for evidence of RayInitiator compromise. This product is provided subject to this Notification and this Privacy & Use policy.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

CVE	CVSS	Affected
CVE-2025-20333	9.9 Critical	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vu…
CVE-2025-20362	6.5 Medium	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a missing authorizat…

Extracted from the publication text. Each CVE links to its tracked detail page.

Vendors Named in This Publication

Cisco 99 KEV

Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.