（CVE-2025-20362）思科ASA和FTD VPN Web服务器输入验证漏洞导致未授权访问受限URL

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-20362
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW
• https://www.rapid7.com/db/vulnerabilities/cisco-asa-cve-2025-20362/
• https://www.crowdsec.net/vulntracking-report/cve-2025-20362-cisco-asa-vpn-authentication-bypass
• https://www.tenable.com/cve/CVE-2025-20362
• https://attackerkb.com/topics/Szq5u0xgUX/cve-2025-20362
• https://www.sentinelone.com/vulnerability-database/cve-2025-20362/
• https://news.qq.com/rain/a/20250926A030DH00
• https://www.ithome.com.tw/news/171393
• https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks

Related Vulnerabilities

• （CVE-2025-20333）思科ASA和FTD软件VPN Web服务器输入验证漏洞导致任意代码执行
• PoCCVE-2025-20362: Cisco Secure Firewall ASA & FTD - Authentication Bypass
• (CVE-2022-20685) Snort Modbus预处理器 拒绝服务漏洞
• Cisco Firepower Threat Defense 安全漏洞