CVE-2025-20362 Scanner

A safe, non-destructive Python scanner for Cisco ASA / FTD WebVPN Authentication Bypass (CVE-2025-20362).

CVE-2025-20362 allows unauthenticated attackers to bypass authentication and access restricted WebVPN resources through path traversal / normalization flaws.

Overview

This tool tests whether restricted WebVPN paths (including sessions, file listings, and configuration-related endpoints) are accessible without authentication. It is designed for security researchers and administrators to assess exposure on systems they are authorized to test.

Note: This script performs GET requests only and does not attempt exploitation.

Vulnerability Details

• CVE ID: CVE-2025-20362
• Severity: High
• Type: Authentication Bypass (Path Traversal / Normalization)
• Affected Products: Cisco ASA and Cisco FTD with WebVPN enabled
• Often chained with: CVE-2025-20333 (RCE)
• Impact: Unauthorized access to sensitive information and attack surface exposure

Features

• Tests multiple restricted and sensitive WebVPN paths
• Includes common path traversal bypass patterns
• Detects potential exposure of sessions and configuration data
• Clean and colored console output

Usage

python CVE_2025_20362-Python-Scanner.py https://target-vpn.example.com

Installation

git clone https://github.com/curtishoughton/CVE-2025-20362-Cisco-Scanner.git
cd CVE-2025-20362-Cisco-Scanner
pip3 install requests