- 50,000 Cisco firewalls vulnerable to actively exploited RCE flaws CVE-2025-20333 and 20362
- Cisco and CISA urge immediate patching; no workarounds available for affected ASA/FTD devices
- Shadowserver found 48.8K unpatched IPs; top affected countries include USA, UK, and Germany
Around 50,000 internet-connected Cisco firewalls are vulnerable to two actively exploited flaws, granting threat actors unauthenticated remote code execution (RCE), as well as full control over compromised devices.
