Skip to content
Sign in

Cisco product

Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense

Alert
No CISA KEV deadline is open. CISA last added a Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense CVE on 25 Sep 2025.

Tracked since 24 Apr · latest article 25 Apr · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 2 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date2

Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense CVEs in CISA KEV with their federal deadlines. None is open.

Exploited Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2025-20333Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense25 SepPassed 26 Sep3
In CISA KEVCVE-2025-20362Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense25 SepPassed 26 Sep3
Vendor CSV of 101 entries for CiscoAll 101 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’252Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20252
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Fix listed

2 of 2 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2025-20362: 99.7th percentile, in CISA KEVCVE-2025-20333: 99.4th percentile, in CISA KEV050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2025-2036299.7
CVE-2025-2033399.4

Coverage3 articles · all time

The latest 3 articles naming Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense, in the shared story grammar.

Full timeline
Quiet for 27 weekslast report 25 Apr3 articles3 outlets

3 articles from 3 outlets since 24 Apr. Quiet since 25 Apr.

Now24 Apr2425262727 OctFirst reportSecurityWeek · 24 Apr, 11:30
  • Fri 24 Apr, 11:30 UTC. SecurityWeek, first report. US Agency Hit by Firestarter Backdoor on Cisco Firepower Gear. Cites a CVE in CISA KEV.
  • Fri 24 Apr, 18:06 UTC. The Hacker News, its first report on the story. Cisco ASA Backdoor FIRESTARTER Persists After Patches, NCSC Warns. Cites a CVE in CISA KEV.
  • Sat 25 Apr, 01:26 UTC. Security Affairs, its first report on the story. FIRESTARTER backdoor persists on patched Cisco ASA devices. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Fri 24 AprDay 02
    1. US Agency Hit by Firestarter Backdoor on Cisco Firepower Gear11:30 · SecurityWeek · First report · Exploited CVE · Known exploited CVE
    2. Cisco ASA Backdoor FIRESTARTER Persists After Patches, NCSC Warns18:06 · The Hacker News · Known exploited CVE
  2. Sat 25 AprDay 11
    1. FIRESTARTER backdoor persists on patched Cisco ASA devices01:26 · Security Affairs · Known exploited CVE

All CVEs in coverage2

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2025-20362Exploited

    Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

    6.5Medium87% EPSS · 3 articles
  • CVE-2025-20333Exploited

    Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

    9.9Critical71% EPSS · 3 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in