Multiple Vulnerabilities in Cisco Products Could Allow for Remote Code Execution

This advisory describes three vulnerabilities in Cisco Secure Firewall (ASA/FTD) and Cisco IOS-family web services that allow attackers—either unauthenticated or with low privileges—to access restricted URLs or execute arbitrary code as root via crafted HTTP(S) requests (CVE-2025-20362, CVE-2025-20333, CVE-2025-20363), potentially resulting in full device compromise.