NCSC-TAD-2509-001
مستوى الخطورة: حرجة
ثغرة
الرقم المرجعي: NCSC-TAD-2509-001CVSS 0
Active Exploitation Campaign Targeting Cisco ASA
- نوع التهديد:
- غير متوفر
- مستوى المشاركة (TLP):
- CLEAR
- CVE:
- CVE-2025-20333, CVE-2025-20362
نظرة عامة
The NCSC becomes aware of an ongoing exploitation campaign targeting Cisco Adaptive Security Appliances (ASA). Threat actors exploit the affected appliances to gain unauthenticated remote code execution on ASAs, as well as manipulating read-only memory (ROM) for persistence. please check the references for more info.
التقنيات المتأثرة
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- Cisco Secure Firewall Threat Defense (FTD) Software
إجراءات الحد من المخاطر والإجراءات الفورية
- 01
NCSC recommends all entites to identify the Cisco ASA appliances in their networks, download and apply the latest Cisco-provided updates for software.
- 02
The center urges to report any detected suspicious cyber activities to the Cyber Monitoring Team by calling 88881 or via email at cert@ncsc.gov.bh