Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2025-20252

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to partially exhaust system memory, causing system instability like being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

SeverityMEDIUM
CVSS5.8
CWECWE-401
KEV No
Published
Modified

Related Products

Product Advisory Evidence
Cisco IOS cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall Threat Defense Virtual cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall 1200 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall 4200 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall 3100 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Adaptive Security Virtual Appliance (ASAv) cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Firepower 4100 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Firepower 9000 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco 3000 Series Industrial Security Appliances (ISA) cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco ASA 5500-X Series Firewalls cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Firepower 1000 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Firepower 2100 Series cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall Threat Defense (FTD) Software cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Secure Firewall Adaptive Security Appliance (ASA) Software cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco IOS XE Software cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln
Cisco Catalyst 9600 Series Switches cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches cisco-sa-asa-ftd-ios-dos-DOESHWHy Cisco OpenVuln · software-dependent