A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition.

This vulnerability is due to a lack of proper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00122.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco IOS affected
Version Status Constraints
15.1(2)T affected —
15.1(1)T4 affected —
15.1(3)T2 affected —
15.1(1)T1 affected —
15.1(2)T0a affected —
15.1(3)T3 affected —
15.1(1)T3 affected —
15.1(2)T3 affected —
15.1(2)T4 affected —
15.1(1)T2 affected —
15.1(3)T affected —
15.1(2)T2a affected —
15.1(3)T1 affected —
15.1(1)T affected —
15.1(2)T2 affected —
15.1(2)T1 affected —
15.1(2)T5 affected —
15.1(3)T4 affected —
15.1(1)T5 affected —
15.3(1)T affected —
15.3(2)T affected —
15.3(1)T1 affected —
15.3(1)T2 affected —
15.3(1)T3 affected —
15.3(1)T4 affected —
15.3(2)T1 affected —
15.3(2)T2 affected —
15.3(2)T3 affected —
15.3(2)T4 affected —
15.0(2)EY affected —
15.0(2)EY1 affected —
15.0(2)EY2 affected —
15.0(2)EY3 affected —
15.1(4)M3 affected —
15.1(4)M affected —
15.1(4)M1 affected —
15.1(4)M2 affected —
15.1(4)M6 affected —
15.1(4)M5 affected —
15.1(4)M4 affected —
15.1(4)M7 affected —
15.1(4)M3a affected —
15.1(4)M10 affected —
15.1(4)M8 affected —
15.1(4)M9 affected —
15.0(2)SE affected —
15.0(2)SE1 affected —
15.0(2)SE2 affected —
15.0(2)SE3 affected —
15.0(2)SE4 affected —
15.0(2)SE5 affected —
15.0(2)SE6 affected —
15.0(2)SE7 affected —
15.0(2)SE8 affected —
15.0(2)SE9 affected —
15.0(2)SE10 affected —
15.0(2)SE11 affected —
15.0(2)SE10a affected —
15.0(2)SE12 affected —
15.0(2)SE13 affected —
15.1(2)GC affected —
15.1(2)GC1 affected —
15.1(2)GC2 affected —
15.1(4)GC affected —
15.1(4)GC1 affected —
15.1(4)GC2 affected —
15.1(1)SG affected —
15.1(2)SG affected —
15.1(1)SG1 affected —
15.1(1)SG2 affected —
15.1(2)SG1 affected —
15.1(2)SG2 affected —
15.1(2)SG3 affected —
15.1(2)SG4 affected —
15.1(2)SG5 affected —
15.1(2)SG6 affected —
15.1(2)SG7 affected —
15.1(2)SG8 affected —
15.2(4)M affected —
15.2(4)M1 affected —
15.2(4)M2 affected —
15.2(4)M4 affected —
15.2(4)M3 affected —
15.2(4)M5 affected —
15.2(4)M8 affected —
15.2(4)M10 affected —
15.2(4)M7 affected —
15.2(4)M6 affected —
15.2(4)M9 affected —
15.2(4)M6a affected —
15.2(4)M11 affected —
15.0(2)EX affected —
15.0(2)EX1 affected —
15.0(2)EX2 affected —
15.0(2)EX3 affected —
15.0(2)EX4 affected —
15.0(2)EX5 affected —
15.0(2)EX8 affected —
15.0(2a)EX5 affected —
15.0(2)EX10 affected —
15.0(2)EX11 affected —
15.0(2)EX13 affected —
15.0(2)EX12 affected —
15.2(1)GC affected —
15.2(1)GC1 affected —
15.2(1)GC2 affected —
15.2(2)GC affected —
15.2(3)GC affected —
15.2(3)GC1 affected —
15.2(4)GC affected —
15.2(4)GC1 affected —
15.2(4)GC2 affected —
15.2(4)GC3 affected —
15.1(1)SY affected —
15.1(1)SY1 affected —
15.1(2)SY affected —
15.1(2)SY1 affected —
15.1(2)SY2 affected —
15.1(1)SY2 affected —
15.1(1)SY3 affected —
15.1(2)SY3 affected —
15.1(1)SY4 affected —
15.1(2)SY4 affected —
15.1(1)SY5 affected —
15.1(2)SY5 affected —
15.1(2)SY4a affected —
15.1(1)SY6 affected —
15.1(2)SY6 affected —
15.1(2)SY7 affected —
15.1(2)SY8 affected —
15.1(2)SY9 affected —
15.1(2)SY10 affected —
15.1(2)SY11 affected —
15.1(2)SY12 affected —
15.1(2)SY13 affected —
15.1(2)SY14 affected —
15.1(2)SY15 affected —
15.1(2)SY16 affected —
15.4(1)T affected —
15.4(2)T affected —
15.4(1)T2 affected —
15.4(1)T1 affected —
15.4(1)T3 affected —
15.4(2)T1 affected —
15.4(2)T3 affected —
15.4(2)T2 affected —
15.4(1)T4 affected —
15.4(2)T4 affected —
15.2(1)E affected —
15.2(2)E affected —
15.2(1)E1 affected —
15.2(3)E affected —
15.2(1)E2 affected —
15.2(1)E3 affected —
15.2(2)E1 affected —
15.2(4)E affected —
15.2(3)E1 affected —
15.2(2)E2 affected —
15.2(2a)E1 affected —
15.2(2)E3 affected —
15.2(2a)E2 affected —
15.2(3)E2 affected —
15.2(3a)E affected —
15.2(3)E3 affected —
15.2(4)E1 affected —
15.2(2)E4 affected —
15.2(2)E5 affected —
15.2(4)E2 affected —
15.2(3)E4 affected —
15.2(5)E affected —
15.2(4)E3 affected —
15.2(2)E6 affected —
15.2(5)E1 affected —
15.2(5b)E affected —
15.2(2)E5a affected —
15.2(2)E5b affected —
15.2(5a)E1 affected —
15.2(4)E4 affected —
15.2(2)E7 affected —
15.2(5)E2 affected —
15.2(6)E affected —
15.2(4)E5 affected —
15.2(5)E2c affected —
15.2(2)E8 affected —
15.2(6)E0a affected —
15.2(6)E1 affected —
15.2(6)E0c affected —
15.2(4)E6 affected —
15.2(6)E2 affected —
15.2(2)E9 affected —
15.2(4)E7 affected —
15.2(7)E affected —
15.2(2)E10 affected —
15.2(4)E8 affected —
15.2(6)E2a affected —
15.2(7)E1 affected —
15.2(7)E0a affected —
15.2(7)E0b affected —
15.2(7)E0s affected —
15.2(6)E3 affected —
15.2(4)E9 affected —
15.2(7)E2 affected —
15.2(7a)E0b affected —
15.2(4)E10 affected —
15.2(7)E3 affected —
15.2(7)E1a affected —
15.2(7b)E0b affected —
15.2(4)E10a affected —
15.2(7)E4 affected —
15.2(8)E affected —
15.2(8)E1 affected —
15.2(7)E5 affected —
15.2(7)E6 affected —
15.2(8)E2 affected —
15.2(4)E10d affected —
15.2(7)E7 affected —
15.2(8)E3 affected —
15.2(7)E8 affected —
15.2(8)E4 affected —
15.2(7)E9 affected —
15.2(8)E5 affected —
15.2(8)E6 affected —
15.2(7)E10 affected —
15.2(7)E11 affected —
15.2(8)E7 affected —
15.2(7)E12 affected —
15.1(3)MRA3 affected —
15.1(3)MRA4 affected —
15.1(3)SVB1 affected —
15.1(3)SVB2 affected —
15.4(2)S3 affected —
15.3(3)M affected —
15.3(3)M1 affected —
15.3(3)M2 affected —
15.3(3)M3 affected —
15.3(3)M5 affected —
15.3(3)M4 affected —
15.3(3)M6 affected —
15.3(3)M7 affected —
15.3(3)M8 affected —
15.3(3)M9 affected —
15.3(3)M10 affected —
15.3(3)M8a affected —
15.2(4)JN affected —
15.0(2)EZ affected —
15.1(3)SVD affected —
15.1(3)SVD1 affected —
15.1(3)SVD2 affected —
15.2(1)EY affected —
15.0(2)EJ affected —
15.0(2)EJ1 affected —
15.2(1)SY affected —
15.2(1)SY1 affected —
15.2(1)SY0a affected —
15.2(1)SY2 affected —
15.2(2)SY affected —
15.2(1)SY1a affected —
15.2(2)SY1 affected —
15.2(2)SY2 affected —
15.2(1)SY3 affected —
15.2(1)SY4 affected —
15.2(2)SY3 affected —
15.2(1)SY5 affected —
15.2(1)SY6 affected —
15.2(1)SY7 affected —
15.2(1)SY8 affected —
15.1(3)SVF affected —
15.1(3)SVF1 affected —
15.1(3)SVE affected —
15.0(2)EK affected —
15.0(2)EK1 affected —
15.4(1)CG affected —
15.4(1)CG1 affected —
15.4(2)CG affected —
15.1(3)SVG affected —
15.2(2)EB affected —
15.2(2)EB1 affected —
15.2(2)EB2 affected —
15.2(6)EB affected —
15.5(1)T affected —
15.5(1)T1 affected —
15.5(2)T affected —
15.5(1)T2 affected —
15.5(1)T3 affected —
15.5(2)T1 affected —
15.5(2)T2 affected —
15.5(2)T3 affected —
15.5(2)T4 affected —
15.5(1)T4 affected —
15.2(2)EA affected —
15.2(2)EA2 affected —
15.2(3)EA affected —
15.2(4)EA affected —
15.2(4)EA1 affected —
15.2(2)EA3 affected —
15.2(5)EA affected —
15.2(4)EA4 affected —
15.2(4)EA5 affected —
15.2(4)EA6 affected —
15.2(4)EA7 affected —
15.2(4)EA8 affected —
15.2(4)EA9 affected —
15.2(4)EA9a affected —
15.5(3)M affected —
15.5(3)M1 affected —
15.5(3)M0a affected —
15.5(3)M2 affected —
15.5(3)M3 affected —
15.5(3)M4 affected —
15.5(3)M4a affected —
15.5(3)M5 affected —
15.5(3)M6 affected —
15.5(3)M7 affected —
15.5(3)M6a affected —
15.5(3)M8 affected —
15.5(3)M9 affected —
15.5(3)M10 affected —
15.6(1)T affected —
15.6(2)T affected —
15.6(1)T0a affected —
15.6(1)T1 affected —
15.6(2)T1 affected —
15.6(1)T2 affected —
15.6(2)T2 affected —
15.6(1)T3 affected —
15.6(2)T3 affected —
15.3(1)SY affected —
15.3(1)SY1 affected —
15.3(1)SY2 affected —
15.6(3)M affected —
15.6(3)M1 affected —
15.6(3)M0a affected —
15.6(3)M1b affected —
15.6(3)M2 affected —
15.6(3)M2a affected —
15.6(3)M3 affected —
15.6(3)M3a affected —
15.6(3)M4 affected —
15.6(3)M5 affected —
15.6(3)M6 affected —
15.6(3)M7 affected —
15.6(3)M6a affected —
15.6(3)M6b affected —
15.6(3)M8 affected —
15.6(3)M9 affected —
15.1(3)SVJ2 affected —
15.2(4)EC1 affected —
15.2(4)EC2 affected —
15.3(3)JPC5 affected —
15.4(1)SY affected —
15.4(1)SY1 affected —
15.4(1)SY2 affected —
15.4(1)SY3 affected —
15.4(1)SY4 affected —
15.5(1)SY affected —
15.5(1)SY1 affected —
15.5(1)SY2 affected —
15.5(1)SY3 affected —
15.5(1)SY4 affected —
15.5(1)SY5 affected —
15.5(1)SY6 affected —
15.5(1)SY7 affected —
15.5(1)SY8 affected —
15.5(1)SY9 affected —
15.5(1)SY10 affected —
15.5(1)SY11 affected —
15.5(1)SY12 affected —
15.5(1)SY13 affected —
15.5(1)SY14 affected —
15.5(1)SY15 affected —
15.7(3)M affected —
15.7(3)M1 affected —
15.7(3)M0a affected —
15.7(3)M3 affected —
15.7(3)M2 affected —
15.7(3)M4 affected —
15.7(3)M5 affected —
15.7(3)M4a affected —
15.7(3)M4b affected —
15.7(3)M6 affected —
15.7(3)M7 affected —
15.7(3)M8 affected —
15.7(3)M9 affected —
15.8(3)M affected —
15.8(3)M1 affected —
15.8(3)M0a affected —
15.8(3)M0b affected —
15.8(3)M2 affected —
15.8(3)M1a affected —
15.8(3)M3 affected —
15.8(3)M2a affected —
15.8(3)M4 affected —
15.8(3)M3a affected —
15.8(3)M3b affected —
15.8(3)M5 affected —
15.8(3)M6 affected —
15.8(3)M7 affected —
15.8(3)M8 affected —
15.8(3)M9 affected —
15.9(3)M affected —
15.9(3)M1 affected —
15.9(3)M0a affected —
15.9(3)M2 affected —
15.9(3)M3 affected —
15.9(3)M2a affected —
15.9(3)M3a affected —
15.9(3)M4 affected —
15.9(3)M3b affected —
15.9(3)M5 affected —
15.9(3)M4a affected —
15.9(3)M6 affected —
15.9(3)M7 affected —
15.9(3)M6a affected —
15.9(3)M6b affected —
15.9(3)M8 affected —
15.9(3)M7a affected —
15.9(3)M9 affected —
15.9(3)M8b affected —
15.9(3)M10 affected —
15.9(3)M11 affected —
Cisco Cisco Adaptive Security Appliance (ASA) Software affected
Version Status Constraints
9.8.1 affected —
9.8.1.5 affected —
9.8.1.7 affected —
9.8.2 affected —
9.8.2.8 affected —
9.8.2.14 affected —
9.8.2.15 affected —
9.8.2.17 affected —
9.8.2.20 affected —
9.8.2.24 affected —
9.8.2.26 affected —
9.8.2.28 affected —
9.8.2.33 affected —
9.8.2.35 affected —
9.8.2.38 affected —
9.8.3.8 affected —
9.8.3.11 affected —
9.8.3.14 affected —
9.8.3.16 affected —
9.8.3.18 affected —
9.8.3.21 affected —
9.8.3 affected —
9.8.3.26 affected —
9.8.3.29 affected —
9.8.4 affected —
9.8.4.3 affected —
9.8.4.7 affected —
9.8.4.8 affected —
9.8.4.10 affected —
9.8.4.12 affected —
9.8.4.15 affected —
9.8.4.17 affected —
9.8.2.45 affected —
9.8.4.25 affected —
9.8.4.20 affected —
9.8.4.22 affected —
9.8.4.26 affected —
9.8.4.29 affected —
9.8.4.32 affected —
9.8.4.33 affected —
9.8.4.34 affected —
9.8.4.35 affected —
9.8.4.39 affected —
9.8.4.40 affected —
9.8.4.41 affected —
9.8.4.43 affected —
9.8.4.44 affected —
9.8.4.45 affected —
9.8.4.46 affected —
9.8.4.48 affected —
9.12.1 affected —
9.12.1.2 affected —
9.12.1.3 affected —
9.12.2 affected —
9.12.2.4 affected —
9.12.2.5 affected —
9.12.2.9 affected —
9.12.3 affected —
9.12.3.2 affected —
9.12.3.7 affected —
9.12.4 affected —
9.12.3.12 affected —
9.12.3.9 affected —
9.12.2.1 affected —
9.12.4.2 affected —
9.12.4.4 affected —
9.12.4.7 affected —
9.12.4.10 affected —
9.12.4.13 affected —
9.12.4.8 affected —
9.12.4.18 affected —
9.12.4.24 affected —
9.12.4.26 affected —
9.12.4.29 affected —
9.12.4.30 affected —
9.12.4.35 affected —
9.12.4.37 affected —
9.12.4.38 affected —
9.12.4.39 affected —
9.12.4.40 affected —
9.12.4.41 affected —
9.12.4.47 affected —
9.12.4.48 affected —
9.12.4.50 affected —
9.12.4.52 affected —
9.12.4.54 affected —
9.12.4.55 affected —
9.12.4.56 affected —
9.12.4.58 affected —
9.12.4.62 affected —
9.12.4.65 affected —
9.12.4.67 affected —
9.14.1 affected —
9.14.1.10 affected —
9.14.1.6 affected —
9.14.1.15 affected —
9.14.1.19 affected —
9.14.1.30 affected —
9.14.2 affected —
9.14.2.4 affected —
9.14.2.8 affected —
9.14.2.13 affected —
9.14.2.15 affected —
9.14.3 affected —
9.14.3.1 affected —
9.14.3.9 affected —
9.14.3.11 affected —
9.14.3.13 affected —
9.14.3.18 affected —
9.14.3.15 affected —
9.14.4 affected —
9.14.4.6 affected —
9.14.4.7 affected —
9.14.4.12 affected —
9.14.4.13 affected —
9.14.4.14 affected —
9.14.4.15 affected —
9.14.4.17 affected —
9.14.4.22 affected —
9.14.4.23 affected —
9.14.4.24 affected —
9.16.1 affected —
9.16.1.28 affected —
9.16.2 affected —
9.16.2.3 affected —
9.16.2.7 affected —
9.16.2.11 affected —
9.16.2.13 affected —
9.16.2.14 affected —
9.16.3 affected —
9.16.3.3 affected —
9.16.3.14 affected —
9.16.3.15 affected —
9.16.3.19 affected —
9.16.3.23 affected —
9.16.4 affected —
9.16.4.9 affected —
9.16.4.14 affected —
9.16.4.18 affected —
9.16.4.19 affected —
9.16.4.27 affected —
9.16.4.38 affected —
9.16.4.39 affected —
9.16.4.42 affected —
9.16.4.48 affected —
9.16.4.55 affected —
9.16.4.57 affected —
9.16.4.61 affected —
9.16.4.62 affected —
9.16.4.67 affected —
9.16.4.70 affected —
9.16.4.71 affected —
9.16.4.76 affected —
9.16.4.82 affected —
9.17.1 affected —
9.17.1.7 affected —
9.17.1.9 affected —
9.17.1.10 affected —
9.17.1.11 affected —
9.17.1.13 affected —
9.17.1.15 affected —
9.17.1.20 affected —
9.17.1.30 affected —
9.17.1.33 affected —
9.17.1.39 affected —
9.17.1.45 affected —
9.17.1.46 affected —
9.18.1 affected —
9.18.1.3 affected —
9.18.2 affected —
9.18.2.5 affected —
9.18.2.7 affected —
9.18.2.8 affected —
9.18.3 affected —
9.18.3.39 affected —
9.18.3.46 affected —
9.18.3.53 affected —
9.18.3.55 affected —
9.18.3.56 affected —
9.18.4 affected —
9.18.4.5 affected —
9.18.4.8 affected —
9.18.4.22 affected —
9.18.4.24 affected —
9.18.4.29 affected —
9.18.4.34 affected —
9.18.4.40 affected —
9.18.4.47 affected —
9.18.4.50 affected —
9.18.4.52 affected —
9.18.4.53 affected —
9.19.1 affected —
9.19.1.5 affected —
9.19.1.9 affected —
9.19.1.12 affected —
9.19.1.18 affected —
9.19.1.22 affected —
9.19.1.24 affected —
9.19.1.27 affected —
9.19.1.28 affected —
9.19.1.31 affected —
9.19.1.37 affected —
9.19.1.38 affected —
9.20.1 affected —
9.20.1.5 affected —
9.20.2 affected —
9.20.2.10 affected —
9.20.2.21 affected —
9.20.2.22 affected —
9.20.3 affected —
9.20.3.4 affected —
9.20.3.7 affected —
9.20.3.9 affected —
9.20.3.10 affected —
9.20.3.13 affected —
9.22.1.1 affected —
9.22.1.3 affected —
9.22.1.2 affected —
9.22.1.6 affected —
9.23.1 affected —
Cisco Cisco IOS XE Software affected
Version Status Constraints
3.3.0SG affected —
3.3.2SG affected —
3.3.1SG affected —
3.4.0SG affected —
3.4.2SG affected —
3.4.1SG affected —
3.4.3SG affected —
3.4.4SG affected —
3.4.5SG affected —
3.4.6SG affected —
3.4.7SG affected —
3.4.8SG affected —
3.5.0E affected —
3.5.1E affected —
3.5.2E affected —
3.5.3E affected —
3.6.0E affected —
3.6.1E affected —
3.6.2aE affected —
3.6.2E affected —
3.6.3E affected —
3.6.4E affected —
3.6.5E affected —
3.6.6E affected —
3.6.5aE affected —
3.6.5bE affected —
3.6.7E affected —
3.6.8E affected —
3.6.7bE affected —
3.6.9E affected —
3.6.10E affected —
3.7.0E affected —
3.7.1E affected —
3.7.2E affected —
3.7.3E affected —
3.7.4E affected —
3.7.5E affected —
3.8.0E affected —
3.8.1E affected —
3.8.2E affected —
3.8.3E affected —
3.8.4E affected —
3.8.5E affected —
3.8.5aE affected —
3.8.6E affected —
3.8.7E affected —
3.8.8E affected —
3.8.9E affected —
3.8.10E affected —
3.18.2aSP affected —
3.9.0E affected —
3.9.1E affected —
3.9.2E affected —
3.10.0E affected —
3.10.1E affected —
3.10.0cE affected —
3.10.2E affected —
3.10.3E affected —
3.11.0E affected —
3.11.1E affected —
3.11.2E affected —
3.11.3E affected —
3.11.1aE affected —
3.11.4E affected —
3.11.3aE affected —
3.11.5E affected —
3.11.6E affected —
3.11.7E affected —
3.11.8E affected —
3.11.9E affected —
3.11.10E affected —
3.11.11E affected —
3.11.12E affected —
17.6.1y affected —
Cisco Cisco Firepower Threat Defense Software affected
Version Status Constraints
6.2.3 affected —
6.2.3.1 affected —
6.2.3.2 affected —
6.2.3.3 affected —
6.2.3.4 affected —
6.2.3.5 affected —
6.2.3.6 affected —
6.2.3.7 affected —
6.2.3.8 affected —
6.2.3.10 affected —
6.2.3.11 affected —
6.2.3.9 affected —
6.2.3.12 affected —
6.2.3.13 affected —
6.2.3.14 affected —
6.2.3.15 affected —
6.2.3.16 affected —
6.2.3.17 affected —
6.2.3.18 affected —
6.6.0 affected —
6.6.0.1 affected —
6.6.1 affected —
6.6.3 affected —
6.6.4 affected —
6.6.5 affected —
6.6.5.1 affected —
6.6.5.2 affected —
6.6.7 affected —
6.6.7.1 affected —
6.6.7.2 affected —
6.4.0 affected —
6.4.0.1 affected —
6.4.0.3 affected —
6.4.0.2 affected —
6.4.0.4 affected —
6.4.0.5 affected —
6.4.0.6 affected —
6.4.0.7 affected —
6.4.0.8 affected —
6.4.0.9 affected —
6.4.0.10 affected —
6.4.0.11 affected —
6.4.0.12 affected —
6.4.0.13 affected —
6.4.0.14 affected —
6.4.0.15 affected —
6.4.0.16 affected —
6.4.0.17 affected —
6.4.0.18 affected —
7.0.0 affected —
7.0.0.1 affected —
7.0.1 affected —
7.0.1.1 affected —
7.0.2 affected —
7.0.2.1 affected —
7.0.3 affected —
7.0.4 affected —
7.0.5 affected —
7.0.6 affected —
7.0.6.1 affected —
7.0.6.2 affected —
7.0.6.3 affected —
7.0.7 affected —
7.1.0 affected —
7.1.0.1 affected —
7.1.0.2 affected —
7.1.0.3 affected —
7.2.0 affected —
7.2.0.1 affected —
7.2.1 affected —
7.2.2 affected —
7.2.3 affected —
7.2.4 affected —
7.2.4.1 affected —
7.2.5 affected —
7.2.5.1 affected —
7.2.6 affected —
7.2.7 affected —
7.2.5.2 affected —
7.2.8 affected —
7.2.8.1 affected —
7.2.9 affected —
7.3.0 affected —
7.3.1 affected —
7.3.1.1 affected —
7.3.1.2 affected —
7.4.0 affected —
7.4.1 affected —
7.4.1.1 affected —
7.4.2 affected —
7.4.2.1 affected —
7.4.2.2 affected —
7.6.0 affected —
7.7.0 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Cisco Subscribe
Adaptive Security Appliance Software Subscribe
Firepower Threat Defense Software Subscribe
Ios Subscribe
Ios Xe Software Subscribe

Project Subscriptions

Vendors Products
Cisco Subscribe
Adaptive Security Appliance Software Subscribe
Firepower Threat Defense Software Subscribe
Ios Subscribe
Ios Xe Software Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2025-24875 A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to a lack of proper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy cve-icon cve-icon
History

Fri, 15 Aug 2025 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco adaptive Security Appliance Software
Cisco firepower Threat Defense Software
Cisco ios
Cisco ios Xe Software
Vendors & Products Cisco
Cisco adaptive Security Appliance Software
Cisco firepower Threat Defense Software
Cisco ios
Cisco ios Xe Software

Thu, 14 Aug 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 14 Aug 2025 17:00:00 +0000

Type Values Removed Values Added
Description Two vulnerabilities in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a DoS condition. These vulnerabilities are due to the improper processing of IKEv2 packets. An attacker could exploit these vulnerabilities by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS and IOS XE Software could allow the attacker to cause a DoS condition, which would cause the affected device to reload. A successful exploit of Cisco Secure Firewall ASA and Secure FTD Software could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions, which requires a manual reboot of the device to recover from this condition. A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to a lack of proper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Title Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability

Thu, 14 Aug 2025 16:45:00 +0000

Type Values Removed Values Added
Description Two vulnerabilities in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a DoS condition. These vulnerabilities are due to the improper processing of IKEv2 packets. An attacker could exploit these vulnerabilities by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS and IOS XE Software could allow the attacker to cause a DoS condition, which would cause the affected device to reload. A successful exploit of Cisco Secure Firewall ASA and Secure FTD Software could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions, which requires a manual reboot of the device to recover from this condition.
Title Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability
Weaknesses CWE-401
References
Metrics cvssV3_1

{'score': 5.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2025-08-14T19:20:27.927Z

Reserved: 2024-10-10T19:15:13.235Z

Link: CVE-2025-20225

cve-icon Vulnrichment

Updated: 2025-08-14T18:39:42.423Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-08-14T17:15:36.750

Modified: 2025-08-15T13:12:51.217

Link: CVE-2025-20225

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-08-15T08:07:49Z

Weaknesses