Analysis Summary

CVE-2025-20333 CVSS:9.9

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow a remote authenticated attacker to execute arbitrary code as root on the system, caused by improper validation of user-supplied input in HTTP(S) requests.

CVE-2025-20334 CVSS:8.8

Cisco IOS XE Software could allow a remote attacker to execute arbitrary commands on the system, caused by insufficient input validation.

CVE-2025-20311 CVSS:7.4

Cisco IOS XE Software is vulnerable to a denial of service, caused by improper handling of crafted Ethernet frames.

Impact

• Code Execution
• Gain Access
• Denial of Service

Indicators of Compromise

CVE

• CVE-2025-20333

• CVE-2025-20334

• CVE-2025-20311

Affected Vendors

Remediation

Refer to Cisco Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2025-20333

CVE-2025-20334

CVE-2025-20311