CVE-2026-20012 - Vulnerability Details

- Improper IKEv2 Packet Parsing Leading to Denial of Service

Description

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

Published: 2026-03-25

Score: 8.6 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability resides in the IKEv2 parsing logic of Cisco IOS, IOS XE, ASA, and FTD software, allowing an unauthenticated remote attacker to send crafted IKEv2 packets that trigger a memory leak. This leak can exhaust system memory, causing the device to become unstable or requiring a full reboot to recover. The weakness is an instance of improper resource management classified as CWE‑401, and the observable effect is a denial of service that disrupts VPN sessions and overall device availability.

Affected Systems

Cisco IOS, Cisco IOS XE, Cisco Secure Firewall Adaptive Security Appliance (ASA), and Cisco Secure Firewall Threat Defense (FTD) are affected. The advisory does not specify particular firmware releases; any build that implements IKEv2 on these platforms falls within the risk scope.

Risk and Exploitability

The CVSS score of 8.6 indicates high severity. EPSS data is not provided and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed large‑scale exploitation yet. The attack vector is remote; an attacker transmits malformed IKEv2 packets over the network to the device. Exploitation requires no authentication and results in a denial of service that can only be resolved by a manual reboot or by applying a vendor patch.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

IOS

affected

Version	Status	Constraints
`15.2(1)S`	affected	—
`15.2(2)S`	affected	—
`15.2(1)S1`	affected	—
`15.2(4)S`	affected	—
`15.2(1)S2`	affected	—
`15.2(2)S1`	affected	—
`15.2(2)S2`	affected	—
`15.2(2)S0a`	affected	—
`15.2(2)S0c`	affected	—
`15.2(4)S1`	affected	—
`15.2(4)S4`	affected	—
`15.2(4)S6`	affected	—
`15.2(4)S2`	affected	—
`15.2(4)S5`	affected	—
`15.2(4)S3`	affected	—
`15.2(4)S3a`	affected	—
`15.2(4)S4a`	affected	—
`15.2(4)S7`	affected	—
`15.3(1)T`	affected	—
`15.3(2)T`	affected	—
`15.3(1)T1`	affected	—
`15.3(1)T2`	affected	—
`15.3(1)T3`	affected	—
`15.3(1)T4`	affected	—
`15.3(2)T1`	affected	—
`15.3(2)T2`	affected	—
`15.3(2)T3`	affected	—
`15.3(2)T4`	affected	—
`15.0(2)EY`	affected	—
`15.0(2)EY1`	affected	—
`15.0(2)EY2`	affected	—
`15.0(2)EY3`	affected	—
`15.1(2)S`	affected	—
`15.1(1)S`	affected	—
`15.1(1)S1`	affected	—
`15.1(3)S`	affected	—
`15.1(1)S2`	affected	—
`15.1(2)S1`	affected	—
`15.1(2)S2`	affected	—
`15.1(3)S1`	affected	—
`15.1(3)S0a`	affected	—
`15.1(3)S2`	affected	—
`15.1(3)S4`	affected	—
`15.1(3)S3`	affected	—
`15.1(3)S5`	affected	—
`15.1(3)S6`	affected	—
`15.1(3)S5a`	affected	—
`15.1(4)M3`	affected	—
`15.1(4)M`	affected	—
`15.1(4)M1`	affected	—
`15.1(4)M2`	affected	—
`15.1(4)M6`	affected	—
`15.1(4)M5`	affected	—
`15.1(4)M4`	affected	—
`15.1(4)M7`	affected	—
`15.1(4)M3a`	affected	—
`15.1(4)M10`	affected	—
`15.1(4)M8`	affected	—
`15.1(4)M9`	affected	—
`15.0(2)SE`	affected	—
`15.0(2)SE1`	affected	—
`15.0(2)SE2`	affected	—
`15.0(2)SE3`	affected	—
`15.0(2)SE4`	affected	—
`15.0(2)SE5`	affected	—
`15.0(2)SE6`	affected	—
`15.0(2)SE7`	affected	—
`15.0(2)SE8`	affected	—
`15.0(2)SE9`	affected	—
`15.0(2)SE10`	affected	—
`15.0(2)SE11`	affected	—
`15.0(2)SE10a`	affected	—
`15.0(2)SE12`	affected	—
`15.0(2)SE13`	affected	—
`15.1(2)GC`	affected	—
`15.1(2)GC1`	affected	—
`15.1(2)GC2`	affected	—
`15.1(4)GC`	affected	—
`15.1(4)GC1`	affected	—
`15.1(4)GC2`	affected	—
`15.1(1)SG`	affected	—
`15.1(2)SG`	affected	—
`15.1(1)SG1`	affected	—
`15.1(1)SG2`	affected	—
`15.1(2)SG1`	affected	—
`15.1(2)SG2`	affected	—
`15.1(2)SG3`	affected	—
`15.1(2)SG4`	affected	—
`15.1(2)SG5`	affected	—
`15.1(2)SG6`	affected	—
`15.1(2)SG7`	affected	—
`15.1(2)SG8`	affected	—
`15.2(4)M`	affected	—
`15.2(4)M1`	affected	—
`15.2(4)M2`	affected	—
`15.2(4)M4`	affected	—
`15.2(4)M3`	affected	—
`15.2(4)M5`	affected	—
`15.2(4)M8`	affected	—
`15.2(4)M10`	affected	—
`15.2(4)M7`	affected	—
`15.2(4)M6`	affected	—
`15.2(4)M9`	affected	—
`15.2(4)M6a`	affected	—
`15.2(4)M11`	affected	—
`15.2(1)GC`	affected	—
`15.2(1)GC1`	affected	—
`15.2(1)GC2`	affected	—
`15.2(2)GC`	affected	—
`15.2(3)GC`	affected	—
`15.2(3)GC1`	affected	—
`15.2(4)GC`	affected	—
`15.2(4)GC1`	affected	—
`15.2(4)GC2`	affected	—
`15.2(4)GC3`	affected	—
`15.1(1)SY`	affected	—
`15.1(1)SY1`	affected	—
`15.1(2)SY`	affected	—
`15.1(2)SY1`	affected	—
`15.1(2)SY2`	affected	—
`15.1(1)SY2`	affected	—
`15.1(1)SY3`	affected	—
`15.1(2)SY3`	affected	—
`15.1(1)SY4`	affected	—
`15.1(2)SY4`	affected	—
`15.1(1)SY5`	affected	—
`15.1(2)SY5`	affected	—
`15.1(2)SY4a`	affected	—
`15.1(1)SY6`	affected	—
`15.1(2)SY6`	affected	—
`15.1(2)SY7`	affected	—
`15.1(2)SY8`	affected	—
`15.1(2)SY9`	affected	—
`15.1(2)SY10`	affected	—
`15.1(2)SY11`	affected	—
`15.1(2)SY12`	affected	—
`15.1(2)SY13`	affected	—
`15.1(2)SY14`	affected	—
`15.1(2)SY15`	affected	—
`15.1(2)SY16`	affected	—
`15.3(1)S`	affected	—
`15.3(2)S`	affected	—
`15.3(3)S`	affected	—
`15.3(1)S2`	affected	—
`15.3(1)S1`	affected	—
`15.3(2)S2`	affected	—
`15.3(2)S1`	affected	—
`15.3(3)S1`	affected	—
`15.3(3)S2`	affected	—
`15.3(3)S3`	affected	—
`15.3(3)S6`	affected	—
`15.3(3)S4`	affected	—
`15.3(3)S1a`	affected	—
`15.3(3)S5`	affected	—
`15.3(3)S7`	affected	—
`15.3(3)S8`	affected	—
`15.3(3)S9`	affected	—
`15.3(3)S10`	affected	—
`15.3(3)S8a`	affected	—
`15.4(1)T`	affected	—
`15.4(2)T`	affected	—
`15.4(1)T2`	affected	—
`15.4(1)T1`	affected	—
`15.4(1)T3`	affected	—
`15.4(2)T1`	affected	—
`15.4(2)T3`	affected	—
`15.4(2)T2`	affected	—
`15.4(1)T4`	affected	—
`15.4(2)T4`	affected	—
`15.0(2)EA`	affected	—
`15.0(2)EA1`	affected	—
`15.2(1)E`	affected	—
`15.2(2)E`	affected	—
`15.2(1)E1`	affected	—
`15.2(3)E`	affected	—
`15.2(1)E2`	affected	—
`15.2(1)E3`	affected	—
`15.2(2)E1`	affected	—
`15.2(4)E`	affected	—
`15.2(3)E1`	affected	—
`15.2(2)E2`	affected	—
`15.2(2a)E1`	affected	—
`15.2(2)E3`	affected	—
`15.2(2a)E2`	affected	—
`15.2(3)E2`	affected	—
`15.2(3a)E`	affected	—
`15.2(3)E3`	affected	—
`15.2(4)E1`	affected	—
`15.2(2)E4`	affected	—
`15.2(2)E5`	affected	—
`15.2(4)E2`	affected	—
`15.2(3)E4`	affected	—
`15.2(5)E`	affected	—
`15.2(4)E3`	affected	—
`15.2(2)E6`	affected	—
`15.2(5a)E`	affected	—
`15.2(5)E1`	affected	—
`15.2(5b)E`	affected	—
`15.2(2)E5a`	affected	—
`15.2(5c)E`	affected	—
`15.2(2)E5b`	affected	—
`15.2(5a)E1`	affected	—
`15.2(4)E4`	affected	—
`15.2(2)E7`	affected	—
`15.2(5)E2`	affected	—
`15.2(6)E`	affected	—
`15.2(4)E5`	affected	—
`15.2(5)E2c`	affected	—
`15.2(2)E8`	affected	—
`15.2(6)E0a`	affected	—
`15.2(6)E1`	affected	—
`15.2(6)E0c`	affected	—
`15.2(4)E6`	affected	—
`15.2(6)E2`	affected	—
`15.2(2)E9`	affected	—
`15.2(4)E7`	affected	—
`15.2(7)E`	affected	—
`15.2(2)E10`	affected	—
`15.2(4)E8`	affected	—
`15.2(6)E2a`	affected	—
`15.2(6)E2b`	affected	—
`15.2(7)E1`	affected	—
`15.2(7)E0a`	affected	—
`15.2(7)E0b`	affected	—
`15.2(7)E0s`	affected	—
`15.2(6)E3`	affected	—
`15.2(4)E9`	affected	—
`15.2(7)E2`	affected	—
`15.2(7a)E0b`	affected	—
`15.2(4)E10`	affected	—
`15.2(7)E3`	affected	—
`15.2(7)E1a`	affected	—
`15.2(7b)E0b`	affected	—
`15.2(7)E2a`	affected	—
`15.2(4)E10a`	affected	—
`15.2(7)E4`	affected	—
`15.2(7)E3k`	affected	—
`15.2(8)E`	affected	—
`15.2(8)E1`	affected	—
`15.2(7)E5`	affected	—
`15.2(7)E6`	affected	—
`15.2(8)E2`	affected	—
`15.2(4)E10d`	affected	—
`15.2(7)E7`	affected	—
`15.2(8)E3`	affected	—
`15.2(7)E8`	affected	—
`15.2(8)E4`	affected	—
`15.2(7)E9`	affected	—
`15.2(8)E5`	affected	—
`15.2(8)E6`	affected	—
`15.2(7)E10`	affected	—
`15.2(7)E11`	affected	—
`15.2(8)E7`	affected	—
`15.2(7)E12`	affected	—
`15.2(8)E8`	affected	—
`15.2(7)E13`	affected	—
`15.2(2)JB`	affected	—
`15.2(2)JB2`	affected	—
`15.2(4)JB`	affected	—
`15.2(2)JB3`	affected	—
`15.2(4)JB1`	affected	—
`15.2(4)JB3`	affected	—
`15.2(4)JB3a`	affected	—
`15.2(2)JB4`	affected	—
`15.2(4)JB4`	affected	—
`15.2(4)JB3b`	affected	—
`15.2(4)JB3s`	affected	—
`15.2(4)JB5`	affected	—
`15.2(4)JB5m`	affected	—
`15.2(4)JB6`	affected	—
`15.2(2)JB5`	affected	—
`15.2(2)JB6`	affected	—
`15.4(1)S`	affected	—
`15.4(2)S`	affected	—
`15.4(3)S`	affected	—
`15.4(1)S1`	affected	—
`15.4(1)S2`	affected	—
`15.4(2)S1`	affected	—
`15.4(1)S3`	affected	—
`15.4(3)S1`	affected	—
`15.4(2)S2`	affected	—
`15.4(3)S2`	affected	—
`15.4(3)S3`	affected	—
`15.4(1)S4`	affected	—
`15.4(2)S3`	affected	—
`15.4(2)S4`	affected	—
`15.4(3)S4`	affected	—
`15.4(3)S5`	affected	—
`15.4(3)S6`	affected	—
`15.4(3)S7`	affected	—
`15.4(3)S6a`	affected	—
`15.4(3)S8`	affected	—
`15.4(3)S9`	affected	—
`15.4(3)S10`	affected	—
`15.2(2)JAX`	affected	—
`15.3(3)M`	affected	—
`15.3(3)M1`	affected	—
`15.3(3)M2`	affected	—
`15.3(3)M3`	affected	—
`15.3(3)M5`	affected	—
`15.3(3)M4`	affected	—
`15.3(3)M6`	affected	—
`15.3(3)M7`	affected	—
`15.3(3)M8`	affected	—
`15.3(3)M9`	affected	—
`15.3(3)M10`	affected	—
`15.3(3)M8a`	affected	—
`15.2(1)EY`	affected	—
`15.0(2)EJ`	affected	—
`15.0(2)EJ1`	affected	—
`15.2(1)SY`	affected	—
`15.2(1)SY1`	affected	—
`15.2(1)SY0a`	affected	—
`15.2(1)SY2`	affected	—
`15.2(2)SY`	affected	—
`15.2(1)SY1a`	affected	—
`15.2(2)SY1`	affected	—
`15.2(2)SY2`	affected	—
`15.2(1)SY3`	affected	—
`15.2(1)SY4`	affected	—
`15.2(2)SY3`	affected	—
`15.2(1)SY5`	affected	—
`15.2(1)SY6`	affected	—
`15.2(1)SY7`	affected	—
`15.2(1)SY8`	affected	—
`15.2(5)EX`	affected	—
`15.0(2)EK`	affected	—
`15.0(2)EK1`	affected	—
`15.4(1)CG`	affected	—
`15.4(1)CG1`	affected	—
`15.4(2)CG`	affected	—
`15.5(1)S`	affected	—
`15.5(2)S`	affected	—
`15.5(1)S1`	affected	—
`15.5(3)S`	affected	—
`15.5(1)S2`	affected	—
`15.5(1)S3`	affected	—
`15.5(2)S1`	affected	—
`15.5(2)S2`	affected	—
`15.5(3)S1`	affected	—
`15.5(3)S1a`	affected	—
`15.5(2)S3`	affected	—
`15.5(3)S2`	affected	—
`15.5(3)S0a`	affected	—
`15.5(3)S3`	affected	—
`15.5(1)S4`	affected	—
`15.5(2)S4`	affected	—
`15.5(3)S4`	affected	—
`15.5(3)S5`	affected	—
`15.5(3)S6`	affected	—
`15.5(3)S6a`	affected	—
`15.5(3)S7`	affected	—
`15.5(3)S6b`	affected	—
`15.5(3)S8`	affected	—
`15.5(3)S9`	affected	—
`15.5(3)S10`	affected	—
`15.5(3)S9a`	affected	—
`15.5(1)T`	affected	—
`15.5(1)T1`	affected	—
`15.5(2)T`	affected	—
`15.5(1)T2`	affected	—
`15.5(1)T3`	affected	—
`15.5(2)T1`	affected	—
`15.5(2)T2`	affected	—
`15.5(2)T3`	affected	—
`15.5(2)T4`	affected	—
`15.5(1)T4`	affected	—
`15.2(2)EA`	affected	—
`15.2(2)EA1`	affected	—
`15.2(2)EA2`	affected	—
`15.2(3)EA`	affected	—
`15.2(4)EA`	affected	—
`15.2(4)EA1`	affected	—
`15.2(2)EA3`	affected	—
`15.2(4)EA3`	affected	—
`15.2(5)EA`	affected	—
`15.2(4)EA4`	affected	—
`15.2(4)EA5`	affected	—
`15.2(4)EA6`	affected	—
`15.2(4)EA7`	affected	—
`15.2(4)EA8`	affected	—
`15.2(4)EA9`	affected	—
`15.2(4)EA9a`	affected	—
`15.3(3)JN8`	affected	—
`15.5(3)M`	affected	—
`15.5(3)M1`	affected	—
`15.5(3)M0a`	affected	—
`15.5(3)M2`	affected	—
`15.5(3)M3`	affected	—
`15.5(3)M4`	affected	—
`15.5(3)M4a`	affected	—
`15.5(3)M5`	affected	—
`15.5(3)M6`	affected	—
`15.5(3)M7`	affected	—
`15.5(3)M6a`	affected	—
`15.5(3)M8`	affected	—
`15.5(3)M9`	affected	—
`15.5(3)M10`	affected	—
`15.3(3)JA`	affected	—
`15.3(3)JA1m`	affected	—
`15.3(3)JA1`	affected	—
`15.3(3)JA4`	affected	—
`15.3(3)JA5`	affected	—
`15.3(3)JA6`	affected	—
`15.3(3)JA7`	affected	—
`15.3(3)JA8`	affected	—
`15.3(3)JA10`	affected	—
`15.3(3)JAA`	affected	—
`15.3(3)JAB`	affected	—
`15.3(3)JB`	affected	—
`15.5(3)SN`	affected	—
`15.6(1)S`	affected	—
`15.6(2)S`	affected	—
`15.6(2)S1`	affected	—
`15.6(1)S1`	affected	—
`15.6(1)S2`	affected	—
`15.6(2)S2`	affected	—
`15.6(1)S3`	affected	—
`15.6(2)S3`	affected	—
`15.6(1)S4`	affected	—
`15.6(2)S4`	affected	—
`15.6(1)T`	affected	—
`15.6(2)T`	affected	—
`15.6(1)T0a`	affected	—
`15.6(1)T1`	affected	—
`15.6(2)T1`	affected	—
`15.6(1)T2`	affected	—
`15.6(2)T2`	affected	—
`15.6(1)T3`	affected	—
`15.6(2)T3`	affected	—
`15.3(3)JNB3`	affected	—
`15.3(3)JAX`	affected	—
`15.3(3)JAX1`	affected	—
`15.3(3)JAX2`	affected	—
`15.3(3)JBB`	affected	—
`15.3(3)JBB1`	affected	—
`15.3(3)JBB2`	affected	—
`15.3(3)JBB4`	affected	—
`15.3(3)JBB5`	affected	—
`15.3(3)JBB6`	affected	—
`15.3(3)JC`	affected	—
`15.3(3)JC1`	affected	—
`15.3(3)JC2`	affected	—
`15.3(3)JC3`	affected	—
`15.3(3)JC4`	affected	—
`15.3(3)JC5`	affected	—
`15.3(1)SY`	affected	—
`15.3(1)SY1`	affected	—
`15.3(1)SY2`	affected	—
`15.6(2)SP`	affected	—
`15.6(2)SP1`	affected	—
`15.6(2)SP2`	affected	—
`15.6(2)SP3`	affected	—
`15.6(2)SP4`	affected	—
`15.6(2)SP5`	affected	—
`15.6(2)SP6`	affected	—
`15.6(2)SP7`	affected	—
`15.6(2)SP8`	affected	—
`15.6(2)SP9`	affected	—
`15.6(2)SN`	affected	—
`15.3(3)JD`	affected	—
`15.3(3)JD2`	affected	—
`15.6(3)M`	affected	—
`15.6(3)M1`	affected	—
`15.6(3)M0a`	affected	—
`15.6(3)M1b`	affected	—
`15.6(3)M2`	affected	—
`15.6(3)M2a`	affected	—
`15.6(3)M3`	affected	—
`15.6(3)M3a`	affected	—
`15.6(3)M4`	affected	—
`15.6(3)M5`	affected	—
`15.6(3)M6`	affected	—
`15.6(3)M7`	affected	—
`15.6(3)M6a`	affected	—
`15.6(3)M6b`	affected	—
`15.6(3)M8`	affected	—
`15.6(3)M9`	affected	—
`15.2(4)EC1`	affected	—
`15.2(4)EC2`	affected	—
`15.4(1)SY`	affected	—
`15.4(1)SY1`	affected	—
`15.4(1)SY2`	affected	—
`15.4(1)SY3`	affected	—
`15.4(1)SY4`	affected	—
`15.5(1)SY`	affected	—
`15.5(1)SY1`	affected	—
`15.5(1)SY2`	affected	—
`15.5(1)SY3`	affected	—
`15.5(1)SY4`	affected	—
`15.5(1)SY5`	affected	—
`15.5(1)SY6`	affected	—
`15.5(1)SY7`	affected	—
`15.5(1)SY8`	affected	—
`15.5(1)SY9`	affected	—
`15.5(1)SY10`	affected	—
`15.5(1)SY11`	affected	—
`15.5(1)SY12`	affected	—
`15.5(1)SY13`	affected	—
`15.5(1)SY14`	affected	—
`15.5(1)SY15`	affected	—
`15.5(1)SY16`	affected	—
`15.7(3)M`	affected	—
`15.7(3)M1`	affected	—
`15.7(3)M0a`	affected	—
`15.7(3)M3`	affected	—
`15.7(3)M2`	affected	—
`15.7(3)M4`	affected	—
`15.7(3)M5`	affected	—
`15.7(3)M4a`	affected	—
`15.7(3)M4b`	affected	—
`15.7(3)M6`	affected	—
`15.7(3)M7`	affected	—
`15.7(3)M8`	affected	—
`15.7(3)M9`	affected	—
`15.8(3)M`	affected	—
`15.8(3)M1`	affected	—
`15.8(3)M0a`	affected	—
`15.8(3)M0b`	affected	—
`15.8(3)M2`	affected	—
`15.8(3)M1a`	affected	—
`15.8(3)M3`	affected	—
`15.8(3)M2a`	affected	—
`15.8(3)M4`	affected	—
`15.8(3)M3a`	affected	—
`15.8(3)M3b`	affected	—
`15.8(3)M5`	affected	—
`15.8(3)M6`	affected	—
`15.8(3)M7`	affected	—
`15.8(3)M8`	affected	—
`15.8(3)M9`	affected	—
`15.9(3)M`	affected	—
`15.9(3)M1`	affected	—
`15.9(3)M0a`	affected	—
`15.9(3)M2`	affected	—
`15.9(3)M3`	affected	—
`15.9(3)M2a`	affected	—
`15.9(3)M3a`	affected	—
`15.9(3)M4`	affected	—
`15.9(3)M3b`	affected	—
`15.9(3)M5`	affected	—
`15.9(3)M4a`	affected	—
`15.9(3)M6`	affected	—
`15.9(3)M7`	affected	—
`15.9(3)M6a`	affected	—
`15.9(3)M6b`	affected	—
`15.9(3)M8`	affected	—
`15.9(3)M7a`	affected	—
`15.9(3)M9`	affected	—
`15.9(3)M8b`	affected	—
`15.9(3)M10`	affected	—
`15.9(3)M11`	affected	—
`15.9(3)M12`	affected	—

Cisco

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

affected

Version	Status	Constraints
`9.8.1`	affected	—
`9.8.1.5`	affected	—
`9.8.1.7`	affected	—
`9.8.2`	affected	—
`9.8.2.8`	affected	—
`9.8.2.14`	affected	—
`9.8.2.15`	affected	—
`9.8.2.17`	affected	—
`9.8.2.20`	affected	—
`9.8.2.24`	affected	—
`9.8.2.26`	affected	—
`9.8.2.28`	affected	—
`9.8.2.33`	affected	—
`9.8.2.35`	affected	—
`9.8.2.38`	affected	—
`9.8.3.8`	affected	—
`9.8.3.11`	affected	—
`9.8.3.14`	affected	—
`9.8.3.16`	affected	—
`9.8.3.18`	affected	—
`9.8.3.21`	affected	—
`9.8.3`	affected	—
`9.8.3.26`	affected	—
`9.8.3.29`	affected	—
`9.8.4`	affected	—
`9.8.4.3`	affected	—
`9.8.4.7`	affected	—
`9.8.4.8`	affected	—
`9.8.4.10`	affected	—
`9.8.4.12`	affected	—
`9.8.4.15`	affected	—
`9.8.4.17`	affected	—
`9.8.2.45`	affected	—
`9.8.4.25`	affected	—
`9.8.4.20`	affected	—
`9.8.4.22`	affected	—
`9.8.4.26`	affected	—
`9.8.4.29`	affected	—
`9.8.4.32`	affected	—
`9.8.4.33`	affected	—
`9.8.4.34`	affected	—
`9.8.4.35`	affected	—
`9.8.4.39`	affected	—
`9.8.4.40`	affected	—
`9.8.4.41`	affected	—
`9.8.4.43`	affected	—
`9.8.4.44`	affected	—
`9.8.4.45`	affected	—
`9.8.4.46`	affected	—
`9.8.4.48`	affected	—
`9.12.1`	affected	—
`9.12.1.2`	affected	—
`9.12.1.3`	affected	—
`9.12.2`	affected	—
`9.12.2.4`	affected	—
`9.12.2.5`	affected	—
`9.12.2.9`	affected	—
`9.12.3`	affected	—
`9.12.3.2`	affected	—
`9.12.3.7`	affected	—
`9.12.4`	affected	—
`9.12.3.12`	affected	—
`9.12.3.9`	affected	—
`9.12.2.1`	affected	—
`9.12.4.2`	affected	—
`9.12.4.4`	affected	—
`9.12.4.7`	affected	—
`9.12.4.10`	affected	—
`9.12.4.13`	affected	—
`9.12.4.8`	affected	—
`9.12.4.18`	affected	—
`9.12.4.24`	affected	—
`9.12.4.26`	affected	—
`9.12.4.29`	affected	—
`9.12.4.30`	affected	—
`9.12.4.35`	affected	—
`9.12.4.37`	affected	—
`9.12.4.38`	affected	—
`9.12.4.39`	affected	—
`9.12.4.40`	affected	—
`9.12.4.41`	affected	—
`9.12.4.47`	affected	—
`9.12.4.48`	affected	—
`9.12.4.50`	affected	—
`9.12.4.52`	affected	—
`9.12.4.54`	affected	—
`9.12.4.55`	affected	—
`9.12.4.56`	affected	—
`9.12.4.58`	affected	—
`9.12.4.62`	affected	—
`9.12.4.65`	affected	—
`9.12.4.67`	affected	—
`9.14.1`	affected	—
`9.14.1.10`	affected	—
`9.14.1.6`	affected	—
`9.14.1.15`	affected	—
`9.14.1.19`	affected	—
`9.14.1.30`	affected	—
`9.14.2`	affected	—
`9.14.2.4`	affected	—
`9.14.2.8`	affected	—
`9.14.2.13`	affected	—
`9.14.2.15`	affected	—
`9.14.3`	affected	—
`9.14.3.1`	affected	—
`9.14.3.9`	affected	—
`9.14.3.11`	affected	—
`9.14.3.13`	affected	—
`9.14.3.18`	affected	—
`9.14.3.15`	affected	—
`9.14.4`	affected	—
`9.14.4.6`	affected	—
`9.14.4.7`	affected	—
`9.14.4.12`	affected	—
`9.14.4.13`	affected	—
`9.14.4.14`	affected	—
`9.14.4.15`	affected	—
`9.14.4.17`	affected	—
`9.14.4.22`	affected	—
`9.14.4.23`	affected	—
`9.14.4.24`	affected	—
`9.16.1`	affected	—
`9.16.1.28`	affected	—
`9.16.2`	affected	—
`9.16.2.3`	affected	—
`9.16.2.7`	affected	—
`9.16.2.11`	affected	—
`9.16.2.13`	affected	—
`9.16.2.14`	affected	—
`9.16.3`	affected	—
`9.16.3.3`	affected	—
`9.16.3.14`	affected	—
`9.16.3.15`	affected	—
`9.16.3.19`	affected	—
`9.16.3.23`	affected	—
`9.16.4`	affected	—
`9.16.4.9`	affected	—
`9.16.4.14`	affected	—
`9.16.4.19`	affected	—
`9.16.4.27`	affected	—
`9.16.4.38`	affected	—
`9.16.4.39`	affected	—
`9.16.4.42`	affected	—
`9.16.4.48`	affected	—
`9.16.4.55`	affected	—
`9.16.4.57`	affected	—
`9.16.4.61`	affected	—
`9.16.4.62`	affected	—
`9.16.4.67`	affected	—
`9.16.4.70`	affected	—
`9.16.4.71`	affected	—
`9.16.4.76`	affected	—
`9.16.4.82`	affected	—
`9.16.4.84`	affected	—
`9.17.1`	affected	—
`9.17.1.7`	affected	—
`9.17.1.9`	affected	—
`9.17.1.10`	affected	—
`9.17.1.11`	affected	—
`9.17.1.13`	affected	—
`9.17.1.15`	affected	—
`9.17.1.20`	affected	—
`9.17.1.30`	affected	—
`9.17.1.33`	affected	—
`9.17.1.39`	affected	—
`9.17.1.45`	affected	—
`9.17.1.46`	affected	—
`9.18.1`	affected	—
`9.18.1.3`	affected	—
`9.18.2`	affected	—
`9.18.2.5`	affected	—
`9.18.2.7`	affected	—
`9.18.2.8`	affected	—
`9.18.3`	affected	—
`9.18.3.39`	affected	—
`9.18.3.46`	affected	—
`9.18.3.53`	affected	—
`9.18.3.55`	affected	—
`9.18.3.56`	affected	—
`9.18.4`	affected	—
`9.18.4.5`	affected	—
`9.18.4.8`	affected	—
`9.18.4.22`	affected	—
`9.18.4.24`	affected	—
`9.18.4.29`	affected	—
`9.18.4.34`	affected	—
`9.18.4.40`	affected	—
`9.18.4.47`	affected	—
`9.18.4.50`	affected	—
`9.18.4.52`	affected	—
`9.18.4.53`	affected	—
`9.18.4.57`	affected	—
`9.18.4.66`	affected	—
`9.18.4.67`	affected	—
`9.18.4.68`	affected	—
`9.19.1`	affected	—
`9.19.1.5`	affected	—
`9.19.1.9`	affected	—
`9.19.1.12`	affected	—
`9.19.1.18`	affected	—
`9.19.1.22`	affected	—
`9.19.1.24`	affected	—
`9.19.1.27`	affected	—
`9.19.1.28`	affected	—
`9.19.1.31`	affected	—
`9.19.1.37`	affected	—
`9.19.1.38`	affected	—
`9.19.1.42`	affected	—
`9.20.1`	affected	—
`9.20.1.5`	affected	—
`9.20.2`	affected	—
`9.20.2.10`	affected	—
`9.20.2.21`	affected	—
`9.20.2.22`	affected	—
`9.20.3`	affected	—
`9.20.3.4`	affected	—
`9.20.3.7`	affected	—
`9.20.3.9`	affected	—
`9.20.3.10`	affected	—
`9.20.3.13`	affected	—
`9.20.3.16`	affected	—
`9.20.3.20`	affected	—
`9.20.4`	affected	—
`9.20.4.7`	affected	—
`9.22.1.1`	affected	—
`9.22.1.3`	affected	—
`9.22.1.2`	affected	—
`9.22.1.6`	affected	—
`9.22.2`	affected	—
`9.22.2.4`	affected	—
`9.22.2.9`	affected	—
`9.23.1`	affected	—
`9.23.1.3`	affected	—
`9.23.1.7`	affected	—
`9.23.1.13`	affected	—

Cisco

Cisco IOS XE Software

affected

Version	Status	Constraints
`3.5.0E`	affected	—
`3.5.1E`	affected	—
`3.5.2E`	affected	—
`3.5.3E`	affected	—
`3.11.1S`	affected	—
`3.11.2S`	affected	—
`3.11.0S`	affected	—
`3.11.3S`	affected	—
`3.11.4S`	affected	—
`3.12.0S`	affected	—
`3.12.1S`	affected	—
`3.12.2S`	affected	—
`3.12.3S`	affected	—
`3.12.0aS`	affected	—
`3.12.4S`	affected	—
`3.13.0S`	affected	—
`3.13.1S`	affected	—
`3.13.2S`	affected	—
`3.13.3S`	affected	—
`3.13.4S`	affected	—
`3.13.5S`	affected	—
`3.13.2aS`	affected	—
`3.13.0aS`	affected	—
`3.13.5aS`	affected	—
`3.13.6S`	affected	—
`3.13.7S`	affected	—
`3.13.6aS`	affected	—
`3.13.7aS`	affected	—
`3.13.8S`	affected	—
`3.13.9S`	affected	—
`3.13.10S`	affected	—
`3.6.0E`	affected	—
`3.6.1E`	affected	—
`3.6.2aE`	affected	—
`3.6.2E`	affected	—
`3.6.3E`	affected	—
`3.6.4E`	affected	—
`3.6.5E`	affected	—
`3.6.6E`	affected	—
`3.6.5aE`	affected	—
`3.6.7E`	affected	—
`3.6.8E`	affected	—
`3.6.7bE`	affected	—
`3.6.9E`	affected	—
`3.6.10E`	affected	—
`3.14.0S`	affected	—
`3.14.1S`	affected	—
`3.14.2S`	affected	—
`3.14.3S`	affected	—
`3.14.4S`	affected	—
`3.15.0S`	affected	—
`3.15.1S`	affected	—
`3.15.2S`	affected	—
`3.15.1cS`	affected	—
`3.15.3S`	affected	—
`3.15.4S`	affected	—
`3.7.0E`	affected	—
`3.7.1E`	affected	—
`3.7.2E`	affected	—
`3.7.3E`	affected	—
`3.7.4E`	affected	—
`3.7.5E`	affected	—
`3.16.0S`	affected	—
`3.16.1S`	affected	—
`3.16.1aS`	affected	—
`3.16.2S`	affected	—
`3.16.2aS`	affected	—
`3.16.0cS`	affected	—
`3.16.3S`	affected	—
`3.16.2bS`	affected	—
`3.16.3aS`	affected	—
`3.16.4S`	affected	—
`3.16.4aS`	affected	—
`3.16.4bS`	affected	—
`3.16.5S`	affected	—
`3.16.4dS`	affected	—
`3.16.6S`	affected	—
`3.16.7S`	affected	—
`3.16.6bS`	affected	—
`3.16.7aS`	affected	—
`3.16.7bS`	affected	—
`3.16.8S`	affected	—
`3.16.9S`	affected	—
`3.16.10S`	affected	—
`3.17.0S`	affected	—
`3.17.1S`	affected	—
`3.17.2S`	affected	—
`3.17.1aS`	affected	—
`3.17.3S`	affected	—
`3.17.4S`	affected	—
`3.8.0E`	affected	—
`3.8.1E`	affected	—
`3.8.2E`	affected	—
`3.8.3E`	affected	—
`3.8.4E`	affected	—
`3.8.5E`	affected	—
`3.8.5aE`	affected	—
`3.8.6E`	affected	—
`3.8.7E`	affected	—
`3.8.8E`	affected	—
`3.8.9E`	affected	—
`3.8.10E`	affected	—
`3.18.0aS`	affected	—
`3.18.0S`	affected	—
`3.18.1S`	affected	—
`3.18.2S`	affected	—
`3.18.3S`	affected	—
`3.18.4S`	affected	—
`3.18.0SP`	affected	—
`3.18.1SP`	affected	—
`3.18.1aSP`	affected	—
`3.18.1bSP`	affected	—
`3.18.1cSP`	affected	—
`3.18.2SP`	affected	—
`3.18.2aSP`	affected	—
`3.18.3SP`	affected	—
`3.18.4SP`	affected	—
`3.18.3aSP`	affected	—
`3.18.3bSP`	affected	—
`3.18.5SP`	affected	—
`3.18.6SP`	affected	—
`3.18.7SP`	affected	—
`3.18.8aSP`	affected	—
`3.18.9SP`	affected	—
`3.9.0E`	affected	—
`3.9.1E`	affected	—
`3.9.2E`	affected	—
`16.6.1`	affected	—
`16.6.2`	affected	—
`16.6.3`	affected	—
`16.6.4`	affected	—
`16.6.5`	affected	—
`16.6.4a`	affected	—
`16.6.5a`	affected	—
`16.6.6`	affected	—
`16.6.7`	affected	—
`16.6.8`	affected	—
`16.6.9`	affected	—
`16.6.10`	affected	—
`16.7.1`	affected	—
`16.7.1a`	affected	—
`16.7.1b`	affected	—
`16.7.2`	affected	—
`16.7.3`	affected	—
`16.7.4`	affected	—
`16.8.1`	affected	—
`16.8.1a`	affected	—
`16.8.1b`	affected	—
`16.8.1s`	affected	—
`16.8.1c`	affected	—
`16.8.1d`	affected	—
`16.8.2`	affected	—
`16.8.1e`	affected	—
`16.8.3`	affected	—
`16.9.1`	affected	—
`16.9.2`	affected	—
`16.9.1a`	affected	—
`16.9.1b`	affected	—
`16.9.1s`	affected	—
`16.9.3`	affected	—
`16.9.4`	affected	—
`16.9.3a`	affected	—
`16.9.5`	affected	—
`16.9.5f`	affected	—
`16.9.6`	affected	—
`16.9.7`	affected	—
`16.9.8`	affected	—
`16.10.1`	affected	—
`16.10.1a`	affected	—
`16.10.1b`	affected	—
`16.10.1s`	affected	—
`16.10.1c`	affected	—
`16.10.1e`	affected	—
`16.10.1d`	affected	—
`16.10.2`	affected	—
`16.10.1f`	affected	—
`16.10.1g`	affected	—
`16.10.3`	affected	—
`3.10.0E`	affected	—
`3.10.1E`	affected	—
`3.10.0cE`	affected	—
`3.10.2E`	affected	—
`3.10.3E`	affected	—
`16.11.1`	affected	—
`16.11.1a`	affected	—
`16.11.1b`	affected	—
`16.11.2`	affected	—
`16.11.1s`	affected	—
`16.12.1`	affected	—
`16.12.1s`	affected	—
`16.12.1a`	affected	—
`16.12.1c`	affected	—
`16.12.1w`	affected	—
`16.12.2`	affected	—
`16.12.1y`	affected	—
`16.12.2a`	affected	—
`16.12.3`	affected	—
`16.12.8`	affected	—
`16.12.2s`	affected	—
`16.12.1x`	affected	—
`16.12.1t`	affected	—
`16.12.4`	affected	—
`16.12.3s`	affected	—
`16.12.3a`	affected	—
`16.12.4a`	affected	—
`16.12.5`	affected	—
`16.12.6`	affected	—
`16.12.1z1`	affected	—
`16.12.5a`	affected	—
`16.12.5b`	affected	—
`16.12.1z2`	affected	—
`16.12.6a`	affected	—
`16.12.7`	affected	—
`16.12.9`	affected	—
`16.12.10`	affected	—
`16.12.10a`	affected	—
`16.12.11`	affected	—
`16.12.12`	affected	—
`16.12.13`	affected	—
`16.12.14`	affected	—
`3.11.0E`	affected	—
`3.11.1E`	affected	—
`3.11.2E`	affected	—
`3.11.3E`	affected	—
`3.11.1aE`	affected	—
`3.11.4E`	affected	—
`3.11.3aE`	affected	—
`3.11.5E`	affected	—
`3.11.6E`	affected	—
`3.11.7E`	affected	—
`3.11.8E`	affected	—
`3.11.9E`	affected	—
`3.11.10E`	affected	—
`3.11.11E`	affected	—
`3.11.12E`	affected	—
`3.11.13E`	affected	—
`17.1.1`	affected	—
`17.1.1a`	affected	—
`17.1.1s`	affected	—
`17.1.1t`	affected	—
`17.1.3`	affected	—
`17.2.1`	affected	—
`17.2.1r`	affected	—
`17.2.1a`	affected	—
`17.2.1v`	affected	—
`17.2.2`	affected	—
`17.2.3`	affected	—
`17.3.1`	affected	—
`17.3.2`	affected	—
`17.3.3`	affected	—
`17.3.1a`	affected	—
`17.3.1w`	affected	—
`17.3.2a`	affected	—
`17.3.1x`	affected	—
`17.3.1z`	affected	—
`17.3.4`	affected	—
`17.3.5`	affected	—
`17.3.4a`	affected	—
`17.3.6`	affected	—
`17.3.4b`	affected	—
`17.3.4c`	affected	—
`17.3.5a`	affected	—
`17.3.5b`	affected	—
`17.3.7`	affected	—
`17.3.8`	affected	—
`17.3.8a`	affected	—
`17.4.1`	affected	—
`17.4.2`	affected	—
`17.4.1a`	affected	—
`17.4.1b`	affected	—
`17.4.2a`	affected	—
`17.5.1`	affected	—
`17.5.1a`	affected	—
`17.6.1`	affected	—
`17.6.2`	affected	—
`17.6.1w`	affected	—
`17.6.1a`	affected	—
`17.6.1x`	affected	—
`17.6.3`	affected	—
`17.6.1y`	affected	—
`17.6.1z`	affected	—
`17.6.3a`	affected	—
`17.6.4`	affected	—
`17.6.1z1`	affected	—
`17.6.5`	affected	—
`17.6.6`	affected	—
`17.6.6a`	affected	—
`17.6.5a`	affected	—
`17.6.7`	affected	—
`17.6.8`	affected	—
`17.6.8a`	affected	—
`17.7.1`	affected	—
`17.7.1a`	affected	—
`17.7.1b`	affected	—
`17.7.2`	affected	—
`17.10.1`	affected	—
`17.10.1a`	affected	—
`17.10.1b`	affected	—
`17.8.1`	affected	—
`17.8.1a`	affected	—
`17.9.1`	affected	—
`17.9.1w`	affected	—
`17.9.2`	affected	—
`17.9.1a`	affected	—
`17.9.1x`	affected	—
`17.9.1y`	affected	—
`17.9.3`	affected	—
`17.9.2a`	affected	—
`17.9.1x1`	affected	—
`17.9.3a`	affected	—
`17.9.4`	affected	—
`17.9.1y1`	affected	—
`17.9.5`	affected	—
`17.9.4a`	affected	—
`17.9.5a`	affected	—
`17.9.5b`	affected	—
`17.9.6`	affected	—
`17.9.6a`	affected	—
`17.9.7`	affected	—
`17.9.5e`	affected	—
`17.9.5f`	affected	—
`17.9.8`	affected	—
`17.9.7a`	affected	—
`17.9.7b`	affected	—
`17.11.1`	affected	—
`17.11.1a`	affected	—
`17.12.1`	affected	—
`17.12.1w`	affected	—
`17.12.1a`	affected	—
`17.12.1x`	affected	—
`17.12.2`	affected	—
`17.12.3`	affected	—
`17.12.2a`	affected	—
`17.12.1y`	affected	—
`17.12.1z`	affected	—
`17.12.4`	affected	—
`17.12.3a`	affected	—
`17.12.1z1`	affected	—
`17.12.1z2`	affected	—
`17.12.4a`	affected	—
`17.12.5`	affected	—
`17.12.4b`	affected	—
`17.12.1z3`	affected	—
`17.12.5a`	affected	—
`17.12.1z4`	affected	—
`17.12.6`	affected	—
`17.12.5b`	affected	—
`17.12.5c`	affected	—
`17.12.6a`	affected	—
`17.12.5d`	affected	—
`17.12.6b`	affected	—
`17.13.1`	affected	—
`17.13.1a`	affected	—
`17.14.1`	affected	—
`17.14.1a`	affected	—
`17.15.1`	affected	—
`17.15.1w`	affected	—
`17.15.1a`	affected	—
`17.15.2`	affected	—
`17.15.1b`	affected	—
`17.15.1x`	affected	—
`17.15.1z`	affected	—
`17.15.3`	affected	—
`17.15.2c`	affected	—
`17.15.2a`	affected	—
`17.15.1y`	affected	—
`17.15.2b`	affected	—
`17.15.3a`	affected	—
`17.15.4`	affected	—
`17.15.3b`	affected	—
`17.15.4d`	affected	—
`17.15.4e`	affected	—
`17.16.1`	affected	—
`17.16.1a`	affected	—
`17.17.1`	affected	—
`17.18.1`	affected	—
`17.18.1w`	affected	—
`17.18.1a`	affected	—

Cisco

Cisco Secure Firewall Threat Defense (FTD) Software

affected

Version	Status	Constraints
`6.2.3`	affected	—
`6.2.3.1`	affected	—
`6.2.3.2`	affected	—
`6.2.3.3`	affected	—
`6.2.3.4`	affected	—
`6.2.3.5`	affected	—
`6.2.3.6`	affected	—
`6.2.3.7`	affected	—
`6.2.3.8`	affected	—
`6.2.3.10`	affected	—
`6.2.3.11`	affected	—
`6.2.3.9`	affected	—
`6.2.3.12`	affected	—
`6.2.3.13`	affected	—
`6.2.3.14`	affected	—
`6.2.3.15`	affected	—
`6.2.3.16`	affected	—
`6.2.3.17`	affected	—
`6.2.3.18`	affected	—
`6.6.0`	affected	—
`6.6.0.1`	affected	—
`6.6.1`	affected	—
`6.6.3`	affected	—
`6.6.4`	affected	—
`6.6.5`	affected	—
`6.6.5.1`	affected	—
`6.6.5.2`	affected	—
`6.6.7`	affected	—
`6.6.7.1`	affected	—
`6.6.7.2`	affected	—
`6.4.0`	affected	—
`6.4.0.1`	affected	—
`6.4.0.3`	affected	—
`6.4.0.2`	affected	—
`6.4.0.4`	affected	—
`6.4.0.5`	affected	—
`6.4.0.6`	affected	—
`6.4.0.7`	affected	—
`6.4.0.8`	affected	—
`6.4.0.9`	affected	—
`6.4.0.10`	affected	—
`6.4.0.11`	affected	—
`6.4.0.12`	affected	—
`6.4.0.13`	affected	—
`6.4.0.14`	affected	—
`6.4.0.15`	affected	—
`6.4.0.16`	affected	—
`6.4.0.17`	affected	—
`6.4.0.18`	affected	—
`7.0.0`	affected	—
`7.0.0.1`	affected	—
`7.0.1`	affected	—
`7.0.1.1`	affected	—
`7.0.2`	affected	—
`7.0.2.1`	affected	—
`7.0.3`	affected	—
`7.0.4`	affected	—
`7.0.5`	affected	—
`7.0.6`	affected	—
`7.0.6.1`	affected	—
`7.0.6.2`	affected	—
`7.0.6.3`	affected	—
`7.0.7`	affected	—
`7.0.8`	affected	—
`7.0.8.1`	affected	—
`7.1.0`	affected	—
`7.1.0.1`	affected	—
`7.1.0.2`	affected	—
`7.1.0.3`	affected	—
`7.2.0`	affected	—
`7.2.0.1`	affected	—
`7.2.1`	affected	—
`7.2.2`	affected	—
`7.2.3`	affected	—
`7.2.4`	affected	—
`7.2.4.1`	affected	—
`7.2.5`	affected	—
`7.2.5.1`	affected	—
`7.2.6`	affected	—
`7.2.7`	affected	—
`7.2.5.2`	affected	—
`7.2.8`	affected	—
`7.2.8.1`	affected	—
`7.2.9`	affected	—
`7.2.10`	affected	—
`7.2.10.2`	affected	—
`7.3.0`	affected	—
`7.3.1`	affected	—
`7.3.1.1`	affected	—
`7.3.1.2`	affected	—
`7.4.0`	affected	—
`7.4.1`	affected	—
`7.4.1.1`	affected	—
`7.4.2`	affected	—
`7.4.2.1`	affected	—
`7.4.2.2`	affected	—
`7.4.2.3`	affected	—
`7.4.2.4`	affected	—
`7.6.0`	affected	—
`7.6.1`	affected	—
`7.6.2`	affected	—
`7.6.2.1`	affected	—
`7.7.0`	affected	—
`7.7.10`	affected	—
`7.7.10.1`	affected	—

No data.

Vendor Product Confidence Versions

Cisco

Cisco:adaptive Security Appliance Software

81%

Version	Status	Scheme	Platform
`9.8.1`	affected	generic	—
`9.8.1.5`	affected	generic	—
`9.8.1.7`	affected	generic	—
`9.8.2`	affected	generic	—
`9.8.2.8`	affected	generic	—
`9.8.2.14`	affected	generic	—
`9.8.2.15`	affected	generic	—
`9.8.2.17`	affected	generic	—
`9.8.2.20`	affected	generic	—
`9.8.2.24`	affected	generic	—
`9.8.2.26`	affected	generic	—
`9.8.2.28`	affected	generic	—
`9.8.2.33`	affected	generic	—
`9.8.2.35`	affected	generic	—
`9.8.2.38`	affected	generic	—

Cisco

Ios

100%

Version	Status	Scheme	Platform
`15.2(1)S`	affected	generic	—
`15.2(2)S`	affected	generic	—
`15.2(1)S1`	affected	generic	—
`15.2(4)S`	affected	generic	—
`15.2(1)S2`	affected	generic	—
`15.2(2)S1`	affected	generic	—
`15.2(2)S2`	affected	generic	—
`15.2(2)S0a`	affected	generic	—
`15.2(2)S0c`	affected	generic	—
`15.2(4)S1`	affected	generic	—
`15.2(4)S4`	affected	generic	—
`15.2(4)S6`	affected	generic	—
`15.2(4)S2`	affected	generic	—
`15.2(4)S5`	affected	generic	—
`15.2(4)S3`	affected	generic	—
`15.2(4)S3a`	affected	generic	—
`15.2(4)S4a`	affected	generic	—
`15.2(4)S7`	affected	generic	—
`15.3(1)T`	affected	generic	—
`15.3(2)T`	affected	generic	—
`15.3(1)T1`	affected	generic	—
`15.3(1)T2`	affected	generic	—
`15.3(1)T3`	affected	generic	—
`15.3(1)T4`	affected	generic	—
`15.3(2)T1`	affected	generic	—
`15.3(2)T2`	affected	generic	—
`15.3(2)T3`	affected	generic	—
`15.3(2)T4`	affected	generic	—
`15.0(2)EY`	affected	generic	—
`15.0(2)EY1`	affected	generic	—
`15.0(2)EY2`	affected	generic	—
`15.0(2)EY3`	affected	generic	—
`15.1(2)S`	affected	generic	—
`15.1(1)S`	affected	generic	—
`15.1(1)S1`	affected	generic	—
`15.1(3)S`	affected	generic	—
`15.1(1)S2`	affected	generic	—
`15.1(2)S1`	affected	generic	—
`15.1(2)S2`	affected	generic	—
`15.1(3)S1`	affected	generic	—
`15.1(3)S0a`	affected	generic	—
`15.1(3)S2`	affected	generic	—
`15.1(3)S4`	affected	generic	—
`15.1(3)S3`	affected	generic	—
`15.1(3)S5`	affected	generic	—
`15.1(3)S6`	affected	generic	—
`15.1(3)S5a`	affected	generic	—
`15.1(4)M3`	affected	generic	—
`15.1(4)M`	affected	generic	—
`15.1(4)M1`	affected	generic	—
`15.1(4)M2`	affected	generic	—
`15.1(4)M6`	affected	generic	—
`15.1(4)M5`	affected	generic	—
`15.1(4)M4`	affected	generic	—
`15.1(4)M7`	affected	generic	—
`15.1(4)M3a`	affected	generic	—
`15.1(4)M10`	affected	generic	—
`15.1(4)M8`	affected	generic	—
`15.1(4)M9`	affected	generic	—
`15.0(2)SE`	affected	generic	—
`15.0(2)SE1`	affected	generic	—
`15.0(2)SE2`	affected	generic	—
`15.0(2)SE3`	affected	generic	—
`15.0(2)SE4`	affected	generic	—
`15.0(2)SE5`	affected	generic	—
`15.0(2)SE6`	affected	generic	—
`15.0(2)SE7`	affected	generic	—
`15.0(2)SE8`	affected	generic	—
`15.0(2)SE9`	affected	generic	—
`15.0(2)SE10`	affected	generic	—
`15.0(2)SE11`	affected	generic	—
`15.0(2)SE10a`	affected	generic	—
`15.0(2)SE12`	affected	generic	—
`15.0(2)SE13`	affected	generic	—
`15.0(2)SE14`	affected	generic	—
`15.0(2)SE15`	affected	generic	—
`15.0(2)SE16`	affected	generic	—
`15.0(2)SE17`	affected	generic	—
`15.0(2)SE18`	affected	generic	—
`15.0(2)SE19`	affected	generic	—
`15.0(2)SE20`	affected	generic	—

Cisco

Ios Xe Software

88%

Version	Status	Scheme	Platform
`3.5.0E`	affected	generic	—
`3.5.1E`	affected	generic	—
`3.5.2E`	affected	generic	—
`3.5.3E`	affected	generic	—
`3.11.1S`	affected	generic	—
`3.11.2S`	affected	generic	—
`3.11.0S`	affected	generic	—
`3.11.3S`	affected	generic	—
`3.11.4S`	affected	generic	—
`3.11.5E`	affected	generic	—
`3.11.6E`	affected	generic	—
`3.11.7E`	affected	generic	—

Cisco

Secure Firewall Threat Defense

100%

Version	Status	Scheme	Platform
`6.2.3`	affected	generic	—
`6.2.3.1`	affected	generic	—
`6.2.3.2`	affected	generic	—
`6.2.3.3`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the latest firmware or software update referenced in the Cisco Security Advisory to fix the IKEv2 memory‑leak flaw.
If an update is not immediately available, schedule a forced reboot of the affected device to clear leaked memory and restore normal operation.
Monitor device memory usage and VPN session stability; perform periodic reboots if instability persists during the remediation window.
Consider limiting or filtering IKEv2 traffic at the network perimeter to reduce exposure to crafted packets from untrusted sources.

Generated by OpenCVE AI on March 25, 2026 at 19:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0013.

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK

History

Mon, 30 Mar 2026 08:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco cisco:adaptive Security Appliance Software Cisco ios Cisco ios Xe Software Cisco secure Firewall Threat Defense
Vendors & Products		Cisco Cisco cisco:adaptive Security Appliance Software Cisco ios Cisco ios Xe Software Cisco secure Firewall Threat Defense

Thu, 26 Mar 2026 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 25 Mar 2026 22:00:00 +0000

Type	Values Removed	Values Added
Title		Improper IKEv2 Packet Parsing Leading to Denial of Service

Wed, 25 Mar 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Weaknesses		CWE-401
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK
Metrics		cvssV3_1 `{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}`

Subscriptions

Cisco Cisco:adaptive Security Appliance Software Ios Ios Xe Software Secure Firewall Threat Defense

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-03-25T16:03:12.439Z

Updated: 2026-03-26T17:37:50.517Z

Reserved: 2025-10-08T11:59:15.350Z

Link: CVE-2026-20012

Vulnrichment

Updated: 2026-03-26T17:37:44.994Z

NVD

Status : Awaiting Analysis

Published: 2026-03-25T16:16:10.957

Modified: 2026-03-26T15:13:33.940

Link: CVE-2026-20012

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-03-30T08:00:21Z

Weaknesses

CWE-401

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object