Rule Info
Name
Cisco ASA Exploitation Activity - Proxy
Author
Swachchhanda Shrawan Poudel (Nextron Systems)
Description
Detects suspicious requests to Cisco ASA WebVpn via proxy logs associated with CVE-2025-20333 and CVE-2025-20362 exploitation.
Date
2025-11-20 00:00:00
Modified
None
Id
15697955-6a29-47ca-92e9-0e05efae3260
Tags
attack.initial-access attack.t1190 cve.2025-20333 cve.2025-20362 detection.emerging-threats
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Swachchhanda Shrawan Poudel
Merge PR #5662 from @swachchhanda000 - Cisco ASA/FP SSL VPN Exploit (CVE-2025-20333 / CVE-2025-20362)
2025-11-21
Scan your endpoints, forensic images or collected files with our portable scanner THOR