Skip to main content
عربي
logo

NCSC-TAD-2509-001

Severity Level: Critical
Vulnerability

Reference No.: NCSC-TAD-2509-001CVSS 0

Active Exploitation Campaign Targeting Cisco ASA

Threat Type:
N/A
TLP:
CLEAR
CVE:
CVE-2025-20333, CVE-2025-20362

Overview

The NCSC becomes aware of an ongoing exploitation campaign targeting Cisco Adaptive Security Appliances (ASA). Threat actors exploit the affected appliances to gain unauthenticated remote code execution on ASAs, as well as manipulating read-only memory (ROM) for persistence. please check the references for more info.

Affected Technologies

  • Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
  • Cisco Secure Firewall Threat Defense (FTD) Software

Mitigation and Immediate Actions

  1. 01

    NCSC recommends all entites to identify the Cisco ASA appliances in their networks, download and apply the latest Cisco-provided updates for software.

  2. 02

    The center urges to report any detected suspicious cyber activities to the Cyber Monitoring Team by calling 88881 or via email at cert@ncsc.gov.bh

References