Cisco Adaptive Security Appliance (ASA) is a security device that combines firewall, antivirus, intrusion prevention, and virtual private network (VPN) capabilities. It provides proactive threat defense that stops attacks before they spread through the network.

Cisco Adaptive Security Appliance (ASA)

Cisco Firepower Threat Defense (FTD) is a unified software solution that integrates comprehensive network security features, including firewall capabilities, application control, intrusion prevention, and malware protection.

Cisco Firepower Threat Defense (FTD)

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this vulnerability, the attacker must have valid administrative credentials.
 This vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input for specific commands. A successful exploit could allow the attacker to execute commands on the underlying operating system as root.

CVE-2025-20238:
Cisco Adaptive Security Appliance (ASA) vulnerability analysis and mitigation

Overview

Technical details

Impact

Mitigation and workarounds

Additional resources

6

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-20238: Cisco Adaptive Security Appliance (ASA) vulnerability analysis and mitigation