Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Loading report content, references and extracted observables.
Brief status
Corroborated brief
Evidence records
1
Structured pivots
4
Publisher text
Withheld by policy
Forensia structured brief
Built from approved structured facts. Every conclusion below carries evidence references.
Finding
indicator:190:descriptionCISA KEV describes CVE-2025-20333 as: Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Software VPN Web Server contain a buffer overflow vulnerability that allows for remote code execution. This vulnerability could be chained with CVE-2025-20362.
Impact
indicator:190:cvsscisa-kev:CVE-2025-20333NVD assigns CVE-2025-20333 a CVSS base score of 9.9. CISA lists CVE-2025-20333 in the Known Exploited Vulnerabilities catalog.
Scope
indicator:190:productsThe structured record identifies affected product references for CVE-2025-20333: Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense.
Action
cisa-kev:CVE-2025-20333:required_actionThe KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
publisher text · intentionally withheld
This source is currently approved for metadata display only. The structured panel above shows only facts that Forensia can lawfully support. Its status will advance automatically when approved evidence becomes available.
Read the original source ↗indicators · 4
report → mentions → indicator
Extracted from the report body and matched against the corpus. Any value resolves to its own verdict.
evidence set
1 recordsGrouping means the records share event anchors. It does not prove that every publisher independently verified the claims.
rights & provenance
Coverage state measures available context, not whether every claim is true or independently corroborated. Unknown publication rights fail closed to metadata and the original source link.
where to go next