A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00099.

Exploitation none

Automatable yes

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco IOS affected
Version Status Constraints
15.2(1)S affected —
15.2(2)S affected —
15.2(1)S1 affected —
15.2(4)S affected —
15.2(1)S2 affected —
15.2(2)S1 affected —
15.2(2)S2 affected —
15.2(2)S0a affected —
15.2(2)S0c affected —
15.2(4)S1 affected —
15.2(4)S4 affected —
15.2(4)S6 affected —
15.2(4)S2 affected —
15.2(4)S5 affected —
15.2(4)S3 affected —
15.2(4)S3a affected —
15.2(4)S4a affected —
15.2(4)S7 affected —
15.3(1)T affected —
15.3(2)T affected —
15.3(1)T1 affected —
15.3(1)T2 affected —
15.3(1)T3 affected —
15.3(1)T4 affected —
15.3(2)T1 affected —
15.3(2)T2 affected —
15.3(2)T3 affected —
15.3(2)T4 affected —
15.0(2)EY affected —
15.0(2)EY1 affected —
15.0(2)EY2 affected —
15.0(2)EY3 affected —
15.1(2)S affected —
15.1(1)S affected —
15.1(1)S1 affected —
15.1(3)S affected —
15.1(1)S2 affected —
15.1(2)S1 affected —
15.1(2)S2 affected —
15.1(3)S1 affected —
15.1(3)S0a affected —
15.1(3)S2 affected —
15.1(3)S4 affected —
15.1(3)S3 affected —
15.1(3)S5 affected —
15.1(3)S6 affected —
15.1(3)S5a affected —
15.1(4)M3 affected —
15.1(4)M affected —
15.1(4)M1 affected —
15.1(4)M2 affected —
15.1(4)M6 affected —
15.1(4)M5 affected —
15.1(4)M4 affected —
15.1(4)M7 affected —
15.1(4)M3a affected —
15.1(4)M10 affected —
15.1(4)M8 affected —
15.1(4)M9 affected —
15.0(2)SE affected —
15.0(2)SE1 affected —
15.0(2)SE2 affected —
15.0(2)SE3 affected —
15.0(2)SE4 affected —
15.0(2)SE5 affected —
15.0(2)SE6 affected —
15.0(2)SE7 affected —
15.0(2)SE8 affected —
15.0(2)SE9 affected —
15.0(2)SE10 affected —
15.0(2)SE11 affected —
15.0(2)SE10a affected —
15.0(2)SE12 affected —
15.0(2)SE13 affected —
15.1(2)GC affected —
15.1(2)GC1 affected —
15.1(2)GC2 affected —
15.1(4)GC affected —
15.1(4)GC1 affected —
15.1(4)GC2 affected —
15.1(1)SG affected —
15.1(2)SG affected —
15.1(1)SG1 affected —
15.1(1)SG2 affected —
15.1(2)SG1 affected —
15.1(2)SG2 affected —
15.1(2)SG3 affected —
15.1(2)SG4 affected —
15.1(2)SG5 affected —
15.1(2)SG6 affected —
15.1(2)SG7 affected —
15.1(2)SG8 affected —
15.2(4)M affected —
15.2(4)M1 affected —
15.2(4)M2 affected —
15.2(4)M4 affected —
15.2(4)M3 affected —
15.2(4)M5 affected —
15.2(4)M8 affected —
15.2(4)M10 affected —
15.2(4)M7 affected —
15.2(4)M6 affected —
15.2(4)M9 affected —
15.2(4)M6a affected —
15.2(4)M11 affected —
15.2(1)GC affected —
15.2(1)GC1 affected —
15.2(1)GC2 affected —
15.2(2)GC affected —
15.2(3)GC affected —
15.2(3)GC1 affected —
15.2(4)GC affected —
15.2(4)GC1 affected —
15.2(4)GC2 affected —
15.2(4)GC3 affected —
15.1(1)SY affected —
15.1(1)SY1 affected —
15.1(2)SY affected —
15.1(2)SY1 affected —
15.1(2)SY2 affected —
15.1(1)SY2 affected —
15.1(1)SY3 affected —
15.1(2)SY3 affected —
15.1(1)SY4 affected —
15.1(2)SY4 affected —
15.1(1)SY5 affected —
15.1(2)SY5 affected —
15.1(2)SY4a affected —
15.1(1)SY6 affected —
15.1(2)SY6 affected —
15.1(2)SY7 affected —
15.1(2)SY8 affected —
15.1(2)SY9 affected —
15.1(2)SY10 affected —
15.1(2)SY11 affected —
15.1(2)SY12 affected —
15.1(2)SY13 affected —
15.1(2)SY14 affected —
15.1(2)SY15 affected —
15.1(2)SY16 affected —
15.3(1)S affected —
15.3(2)S affected —
15.3(3)S affected —
15.3(1)S2 affected —
15.3(1)S1 affected —
15.3(2)S2 affected —
15.3(2)S1 affected —
15.3(3)S1 affected —
15.3(3)S2 affected —
15.3(3)S3 affected —
15.3(3)S6 affected —
15.3(3)S4 affected —
15.3(3)S1a affected —
15.3(3)S5 affected —
15.3(3)S7 affected —
15.3(3)S8 affected —
15.3(3)S9 affected —
15.3(3)S10 affected —
15.3(3)S8a affected —
15.4(1)T affected —
15.4(2)T affected —
15.4(1)T2 affected —
15.4(1)T1 affected —
15.4(1)T3 affected —
15.4(2)T1 affected —
15.4(2)T3 affected —
15.4(2)T2 affected —
15.4(1)T4 affected —
15.4(2)T4 affected —
15.0(2)EA affected —
15.0(2)EA1 affected —
15.2(1)E affected —
15.2(2)E affected —
15.2(1)E1 affected —
15.2(3)E affected —
15.2(1)E2 affected —
15.2(1)E3 affected —
15.2(2)E1 affected —
15.2(4)E affected —
15.2(3)E1 affected —
15.2(2)E2 affected —
15.2(2a)E1 affected —
15.2(2)E3 affected —
15.2(2a)E2 affected —
15.2(3)E2 affected —
15.2(3a)E affected —
15.2(3)E3 affected —
15.2(4)E1 affected —
15.2(2)E4 affected —
15.2(2)E5 affected —
15.2(4)E2 affected —
15.2(3)E4 affected —
15.2(5)E affected —
15.2(4)E3 affected —
15.2(2)E6 affected —
15.2(5a)E affected —
15.2(5)E1 affected —
15.2(5b)E affected —
15.2(2)E5a affected —
15.2(5c)E affected —
15.2(2)E5b affected —
15.2(5a)E1 affected —
15.2(4)E4 affected —
15.2(2)E7 affected —
15.2(5)E2 affected —
15.2(6)E affected —
15.2(4)E5 affected —
15.2(5)E2c affected —
15.2(2)E8 affected —
15.2(6)E0a affected —
15.2(6)E1 affected —
15.2(6)E0c affected —
15.2(4)E6 affected —
15.2(6)E2 affected —
15.2(2)E9 affected —
15.2(4)E7 affected —
15.2(7)E affected —
15.2(2)E10 affected —
15.2(4)E8 affected —
15.2(6)E2a affected —
15.2(6)E2b affected —
15.2(7)E1 affected —
15.2(7)E0a affected —
15.2(7)E0b affected —
15.2(7)E0s affected —
15.2(6)E3 affected —
15.2(4)E9 affected —
15.2(7)E2 affected —
15.2(7a)E0b affected —
15.2(4)E10 affected —
15.2(7)E3 affected —
15.2(7)E1a affected —
15.2(7b)E0b affected —
15.2(7)E2a affected —
15.2(4)E10a affected —
15.2(7)E4 affected —
15.2(7)E3k affected —
15.2(8)E affected —
15.2(8)E1 affected —
15.2(7)E5 affected —
15.2(7)E6 affected —
15.2(8)E2 affected —
15.2(4)E10d affected —
15.2(7)E7 affected —
15.2(8)E3 affected —
15.2(7)E8 affected —
15.2(8)E4 affected —
15.2(7)E9 affected —
15.2(8)E5 affected —
15.2(8)E6 affected —
15.2(7)E10 affected —
15.2(7)E11 affected —
15.2(8)E7 affected —
15.2(7)E12 affected —
15.2(8)E8 affected —
15.2(7)E13 affected —
15.2(2)JB affected —
15.2(2)JB2 affected —
15.2(4)JB affected —
15.2(2)JB3 affected —
15.2(4)JB1 affected —
15.2(4)JB3 affected —
15.2(4)JB3a affected —
15.2(2)JB4 affected —
15.2(4)JB4 affected —
15.2(4)JB3b affected —
15.2(4)JB3s affected —
15.2(4)JB5 affected —
15.2(4)JB5m affected —
15.2(4)JB6 affected —
15.2(2)JB5 affected —
15.2(2)JB6 affected —
15.4(1)S affected —
15.4(2)S affected —
15.4(3)S affected —
15.4(1)S1 affected —
15.4(1)S2 affected —
15.4(2)S1 affected —
15.4(1)S3 affected —
15.4(3)S1 affected —
15.4(2)S2 affected —
15.4(3)S2 affected —
15.4(3)S3 affected —
15.4(1)S4 affected —
15.4(2)S3 affected —
15.4(2)S4 affected —
15.4(3)S4 affected —
15.4(3)S5 affected —
15.4(3)S6 affected —
15.4(3)S7 affected —
15.4(3)S6a affected —
15.4(3)S8 affected —
15.4(3)S9 affected —
15.4(3)S10 affected —
15.2(2)JAX affected —
15.3(3)M affected —
15.3(3)M1 affected —
15.3(3)M2 affected —
15.3(3)M3 affected —
15.3(3)M5 affected —
15.3(3)M4 affected —
15.3(3)M6 affected —
15.3(3)M7 affected —
15.3(3)M8 affected —
15.3(3)M9 affected —
15.3(3)M10 affected —
15.3(3)M8a affected —
15.2(1)EY affected —
15.0(2)EJ affected —
15.0(2)EJ1 affected —
15.2(1)SY affected —
15.2(1)SY1 affected —
15.2(1)SY0a affected —
15.2(1)SY2 affected —
15.2(2)SY affected —
15.2(1)SY1a affected —
15.2(2)SY1 affected —
15.2(2)SY2 affected —
15.2(1)SY3 affected —
15.2(1)SY4 affected —
15.2(2)SY3 affected —
15.2(1)SY5 affected —
15.2(1)SY6 affected —
15.2(1)SY7 affected —
15.2(1)SY8 affected —
15.2(5)EX affected —
15.0(2)EK affected —
15.0(2)EK1 affected —
15.4(1)CG affected —
15.4(1)CG1 affected —
15.4(2)CG affected —
15.5(1)S affected —
15.5(2)S affected —
15.5(1)S1 affected —
15.5(3)S affected —
15.5(1)S2 affected —
15.5(1)S3 affected —
15.5(2)S1 affected —
15.5(2)S2 affected —
15.5(3)S1 affected —
15.5(3)S1a affected —
15.5(2)S3 affected —
15.5(3)S2 affected —
15.5(3)S0a affected —
15.5(3)S3 affected —
15.5(1)S4 affected —
15.5(2)S4 affected —
15.5(3)S4 affected —
15.5(3)S5 affected —
15.5(3)S6 affected —
15.5(3)S6a affected —
15.5(3)S7 affected —
15.5(3)S6b affected —
15.5(3)S8 affected —
15.5(3)S9 affected —
15.5(3)S10 affected —
15.5(3)S9a affected —
15.5(1)T affected —
15.5(1)T1 affected —
15.5(2)T affected —
15.5(1)T2 affected —
15.5(1)T3 affected —
15.5(2)T1 affected —
15.5(2)T2 affected —
15.5(2)T3 affected —
15.5(2)T4 affected —
15.5(1)T4 affected —
15.2(2)EA affected —
15.2(2)EA1 affected —
15.2(2)EA2 affected —
15.2(3)EA affected —
15.2(4)EA affected —
15.2(4)EA1 affected —
15.2(2)EA3 affected —
15.2(4)EA3 affected —
15.2(5)EA affected —
15.2(4)EA4 affected —
15.2(4)EA5 affected —
15.2(4)EA6 affected —
15.2(4)EA7 affected —
15.2(4)EA8 affected —
15.2(4)EA9 affected —
15.2(4)EA9a affected —
15.3(3)JN8 affected —
15.5(3)M affected —
15.5(3)M1 affected —
15.5(3)M0a affected —
15.5(3)M2 affected —
15.5(3)M3 affected —
15.5(3)M4 affected —
15.5(3)M4a affected —
15.5(3)M5 affected —
15.5(3)M6 affected —
15.5(3)M7 affected —
15.5(3)M6a affected —
15.5(3)M8 affected —
15.5(3)M9 affected —
15.5(3)M10 affected —
15.3(3)JA affected —
15.3(3)JA1m affected —
15.3(3)JA1 affected —
15.3(3)JA4 affected —
15.3(3)JA5 affected —
15.3(3)JA6 affected —
15.3(3)JA7 affected —
15.3(3)JA8 affected —
15.3(3)JA10 affected —
15.3(3)JAA affected —
15.3(3)JAB affected —
15.3(3)JB affected —
15.5(3)SN affected —
15.6(1)S affected —
15.6(2)S affected —
15.6(2)S1 affected —
15.6(1)S1 affected —
15.6(1)S2 affected —
15.6(2)S2 affected —
15.6(1)S3 affected —
15.6(2)S3 affected —
15.6(1)S4 affected —
15.6(2)S4 affected —
15.6(1)T affected —
15.6(2)T affected —
15.6(1)T0a affected —
15.6(1)T1 affected —
15.6(2)T1 affected —
15.6(1)T2 affected —
15.6(2)T2 affected —
15.6(1)T3 affected —
15.6(2)T3 affected —
15.3(3)JNB3 affected —
15.3(3)JAX affected —
15.3(3)JAX1 affected —
15.3(3)JAX2 affected —
15.3(3)JBB affected —
15.3(3)JBB1 affected —
15.3(3)JBB2 affected —
15.3(3)JBB4 affected —
15.3(3)JBB5 affected —
15.3(3)JBB6 affected —
15.3(3)JC affected —
15.3(3)JC1 affected —
15.3(3)JC2 affected —
15.3(3)JC3 affected —
15.3(3)JC4 affected —
15.3(3)JC5 affected —
15.3(1)SY affected —
15.3(1)SY1 affected —
15.3(1)SY2 affected —
15.6(2)SP affected —
15.6(2)SP1 affected —
15.6(2)SP2 affected —
15.6(2)SP3 affected —
15.6(2)SP4 affected —
15.6(2)SP5 affected —
15.6(2)SP6 affected —
15.6(2)SP7 affected —
15.6(2)SP8 affected —
15.6(2)SP9 affected —
15.6(2)SN affected —
15.3(3)JD affected —
15.3(3)JD2 affected —
15.6(3)M affected —
15.6(3)M1 affected —
15.6(3)M0a affected —
15.6(3)M1b affected —
15.6(3)M2 affected —
15.6(3)M2a affected —
15.6(3)M3 affected —
15.6(3)M3a affected —
15.6(3)M4 affected —
15.6(3)M5 affected —
15.6(3)M6 affected —
15.6(3)M7 affected —
15.6(3)M6a affected —
15.6(3)M6b affected —
15.6(3)M8 affected —
15.6(3)M9 affected —
15.2(4)EC1 affected —
15.2(4)EC2 affected —
15.4(1)SY affected —
15.4(1)SY1 affected —
15.4(1)SY2 affected —
15.4(1)SY3 affected —
15.4(1)SY4 affected —
15.5(1)SY affected —
15.5(1)SY1 affected —
15.5(1)SY2 affected —
15.5(1)SY3 affected —
15.5(1)SY4 affected —
15.5(1)SY5 affected —
15.5(1)SY6 affected —
15.5(1)SY7 affected —
15.5(1)SY8 affected —
15.5(1)SY9 affected —
15.5(1)SY10 affected —
15.5(1)SY11 affected —
15.5(1)SY12 affected —
15.5(1)SY13 affected —
15.5(1)SY14 affected —
15.5(1)SY15 affected —
15.5(1)SY16 affected —
15.7(3)M affected —
15.7(3)M1 affected —
15.7(3)M0a affected —
15.7(3)M3 affected —
15.7(3)M2 affected —
15.7(3)M4 affected —
15.7(3)M5 affected —
15.7(3)M4a affected —
15.7(3)M4b affected —
15.7(3)M6 affected —
15.7(3)M7 affected —
15.7(3)M8 affected —
15.7(3)M9 affected —
15.8(3)M affected —
15.8(3)M1 affected —
15.8(3)M0a affected —
15.8(3)M0b affected —
15.8(3)M2 affected —
15.8(3)M1a affected —
15.8(3)M3 affected —
15.8(3)M2a affected —
15.8(3)M4 affected —
15.8(3)M3a affected —
15.8(3)M3b affected —
15.8(3)M5 affected —
15.8(3)M6 affected —
15.8(3)M7 affected —
15.8(3)M8 affected —
15.8(3)M9 affected —
15.9(3)M affected —
15.9(3)M1 affected —
15.9(3)M0a affected —
15.9(3)M2 affected —
15.9(3)M3 affected —
15.9(3)M2a affected —
15.9(3)M3a affected —
15.9(3)M4 affected —
15.9(3)M3b affected —
15.9(3)M5 affected —
15.9(3)M4a affected —
15.9(3)M6 affected —
15.9(3)M7 affected —
15.9(3)M6a affected —
15.9(3)M6b affected —
15.9(3)M8 affected —
15.9(3)M7a affected —
15.9(3)M9 affected —
15.9(3)M8b affected —
15.9(3)M10 affected —
15.9(3)M11 affected —
15.9(3)M12 affected —
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software affected
Version Status Constraints
9.8.1 affected —
9.8.1.5 affected —
9.8.1.7 affected —
9.8.2 affected —
9.8.2.8 affected —
9.8.2.14 affected —
9.8.2.15 affected —
9.8.2.17 affected —
9.8.2.20 affected —
9.8.2.24 affected —
9.8.2.26 affected —
9.8.2.28 affected —
9.8.2.33 affected —
9.8.2.35 affected —
9.8.2.38 affected —
9.8.3.8 affected —
9.8.3.11 affected —
9.8.3.14 affected —
9.8.3.16 affected —
9.8.3.18 affected —
9.8.3.21 affected —
9.8.3 affected —
9.8.3.26 affected —
9.8.3.29 affected —
9.8.4 affected —
9.8.4.3 affected —
9.8.4.7 affected —
9.8.4.8 affected —
9.8.4.10 affected —
9.8.4.12 affected —
9.8.4.15 affected —
9.8.4.17 affected —
9.8.2.45 affected —
9.8.4.25 affected —
9.8.4.20 affected —
9.8.4.22 affected —
9.8.4.26 affected —
9.8.4.29 affected —
9.8.4.32 affected —
9.8.4.33 affected —
9.8.4.34 affected —
9.8.4.35 affected —
9.8.4.39 affected —
9.8.4.40 affected —
9.8.4.41 affected —
9.8.4.43 affected —
9.8.4.44 affected —
9.8.4.45 affected —
9.8.4.46 affected —
9.8.4.48 affected —
9.12.1 affected —
9.12.1.2 affected —
9.12.1.3 affected —
9.12.2 affected —
9.12.2.4 affected —
9.12.2.5 affected —
9.12.2.9 affected —
9.12.3 affected —
9.12.3.2 affected —
9.12.3.7 affected —
9.12.4 affected —
9.12.3.12 affected —
9.12.3.9 affected —
9.12.2.1 affected —
9.12.4.2 affected —
9.12.4.4 affected —
9.12.4.7 affected —
9.12.4.10 affected —
9.12.4.13 affected —
9.12.4.8 affected —
9.12.4.18 affected —
9.12.4.24 affected —
9.12.4.26 affected —
9.12.4.29 affected —
9.12.4.30 affected —
9.12.4.35 affected —
9.12.4.37 affected —
9.12.4.38 affected —
9.12.4.39 affected —
9.12.4.40 affected —
9.12.4.41 affected —
9.12.4.47 affected —
9.12.4.48 affected —
9.12.4.50 affected —
9.12.4.52 affected —
9.12.4.54 affected —
9.12.4.55 affected —
9.12.4.56 affected —
9.12.4.58 affected —
9.12.4.62 affected —
9.12.4.65 affected —
9.12.4.67 affected —
9.14.1 affected —
9.14.1.10 affected —
9.14.1.6 affected —
9.14.1.15 affected —
9.14.1.19 affected —
9.14.1.30 affected —
9.14.2 affected —
9.14.2.4 affected —
9.14.2.8 affected —
9.14.2.13 affected —
9.14.2.15 affected —
9.14.3 affected —
9.14.3.1 affected —
9.14.3.9 affected —
9.14.3.11 affected —
9.14.3.13 affected —
9.14.3.18 affected —
9.14.3.15 affected —
9.14.4 affected —
9.14.4.6 affected —
9.14.4.7 affected —
9.14.4.12 affected —
9.14.4.13 affected —
9.14.4.14 affected —
9.14.4.15 affected —
9.14.4.17 affected —
9.14.4.22 affected —
9.14.4.23 affected —
9.14.4.24 affected —
9.16.1 affected —
9.16.1.28 affected —
9.16.2 affected —
9.16.2.3 affected —
9.16.2.7 affected —
9.16.2.11 affected —
9.16.2.13 affected —
9.16.2.14 affected —
9.16.3 affected —
9.16.3.3 affected —
9.16.3.14 affected —
9.16.3.15 affected —
9.16.3.19 affected —
9.16.3.23 affected —
9.16.4 affected —
9.16.4.9 affected —
9.16.4.14 affected —
9.16.4.19 affected —
9.16.4.27 affected —
9.16.4.38 affected —
9.16.4.39 affected —
9.16.4.42 affected —
9.16.4.48 affected —
9.16.4.55 affected —
9.16.4.57 affected —
9.16.4.61 affected —
9.16.4.62 affected —
9.16.4.67 affected —
9.16.4.70 affected —
9.16.4.71 affected —
9.16.4.76 affected —
9.16.4.82 affected —
9.16.4.84 affected —
9.17.1 affected —
9.17.1.7 affected —
9.17.1.9 affected —
9.17.1.10 affected —
9.17.1.11 affected —
9.17.1.13 affected —
9.17.1.15 affected —
9.17.1.20 affected —
9.17.1.30 affected —
9.17.1.33 affected —
9.17.1.39 affected —
9.17.1.45 affected —
9.17.1.46 affected —
9.18.1 affected —
9.18.1.3 affected —
9.18.2 affected —
9.18.2.5 affected —
9.18.2.7 affected —
9.18.2.8 affected —
9.18.3 affected —
9.18.3.39 affected —
9.18.3.46 affected —
9.18.3.53 affected —
9.18.3.55 affected —
9.18.3.56 affected —
9.18.4 affected —
9.18.4.5 affected —
9.18.4.8 affected —
9.18.4.22 affected —
9.18.4.24 affected —
9.18.4.29 affected —
9.18.4.34 affected —
9.18.4.40 affected —
9.18.4.47 affected —
9.18.4.50 affected —
9.18.4.52 affected —
9.18.4.53 affected —
9.18.4.57 affected —
9.18.4.66 affected —
9.18.4.67 affected —
9.18.4.68 affected —
9.19.1 affected —
9.19.1.5 affected —
9.19.1.9 affected —
9.19.1.12 affected —
9.19.1.18 affected —
9.19.1.22 affected —
9.19.1.24 affected —
9.19.1.27 affected —
9.19.1.28 affected —
9.19.1.31 affected —
9.19.1.37 affected —
9.19.1.38 affected —
9.19.1.42 affected —
9.20.1 affected —
9.20.1.5 affected —
9.20.2 affected —
9.20.2.10 affected —
9.20.2.21 affected —
9.20.2.22 affected —
9.20.3 affected —
9.20.3.4 affected —
9.20.3.7 affected —
9.20.3.9 affected —
9.20.3.10 affected —
9.20.3.13 affected —
9.20.3.16 affected —
9.20.3.20 affected —
9.20.4 affected —
9.20.4.7 affected —
9.22.1.1 affected —
9.22.1.3 affected —
9.22.1.2 affected —
9.22.1.6 affected —
9.22.2 affected —
9.22.2.4 affected —
9.22.2.9 affected —
9.23.1 affected —
9.23.1.3 affected —
9.23.1.7 affected —
9.23.1.13 affected —
Cisco Cisco IOS XE Software affected
Version Status Constraints
3.5.0E affected —
3.5.1E affected —
3.5.2E affected —
3.5.3E affected —
3.11.1S affected —
3.11.2S affected —
3.11.0S affected —
3.11.3S affected —
3.11.4S affected —
3.12.0S affected —
3.12.1S affected —
3.12.2S affected —
3.12.3S affected —
3.12.0aS affected —
3.12.4S affected —
3.13.0S affected —
3.13.1S affected —
3.13.2S affected —
3.13.3S affected —
3.13.4S affected —
3.13.5S affected —
3.13.2aS affected —
3.13.0aS affected —
3.13.5aS affected —
3.13.6S affected —
3.13.7S affected —
3.13.6aS affected —
3.13.7aS affected —
3.13.8S affected —
3.13.9S affected —
3.13.10S affected —
3.6.0E affected —
3.6.1E affected —
3.6.2aE affected —
3.6.2E affected —
3.6.3E affected —
3.6.4E affected —
3.6.5E affected —
3.6.6E affected —
3.6.5aE affected —
3.6.7E affected —
3.6.8E affected —
3.6.7bE affected —
3.6.9E affected —
3.6.10E affected —
3.14.0S affected —
3.14.1S affected —
3.14.2S affected —
3.14.3S affected —
3.14.4S affected —
3.15.0S affected —
3.15.1S affected —
3.15.2S affected —
3.15.1cS affected —
3.15.3S affected —
3.15.4S affected —
3.7.0E affected —
3.7.1E affected —
3.7.2E affected —
3.7.3E affected —
3.7.4E affected —
3.7.5E affected —
3.16.0S affected —
3.16.1S affected —
3.16.1aS affected —
3.16.2S affected —
3.16.2aS affected —
3.16.0cS affected —
3.16.3S affected —
3.16.2bS affected —
3.16.3aS affected —
3.16.4S affected —
3.16.4aS affected —
3.16.4bS affected —
3.16.5S affected —
3.16.4dS affected —
3.16.6S affected —
3.16.7S affected —
3.16.6bS affected —
3.16.7aS affected —
3.16.7bS affected —
3.16.8S affected —
3.16.9S affected —
3.16.10S affected —
3.17.0S affected —
3.17.1S affected —
3.17.2S affected —
3.17.1aS affected —
3.17.3S affected —
3.17.4S affected —
3.8.0E affected —
3.8.1E affected —
3.8.2E affected —
3.8.3E affected —
3.8.4E affected —
3.8.5E affected —
3.8.5aE affected —
3.8.6E affected —
3.8.7E affected —
3.8.8E affected —
3.8.9E affected —
3.8.10E affected —
3.18.0aS affected —
3.18.0S affected —
3.18.1S affected —
3.18.2S affected —
3.18.3S affected —
3.18.4S affected —
3.18.0SP affected —
3.18.1SP affected —
3.18.1aSP affected —
3.18.1bSP affected —
3.18.1cSP affected —
3.18.2SP affected —
3.18.2aSP affected —
3.18.3SP affected —
3.18.4SP affected —
3.18.3aSP affected —
3.18.3bSP affected —
3.18.5SP affected —
3.18.6SP affected —
3.18.7SP affected —
3.18.8aSP affected —
3.18.9SP affected —
3.9.0E affected —
3.9.1E affected —
3.9.2E affected —
16.6.1 affected —
16.6.2 affected —
16.6.3 affected —
16.6.4 affected —
16.6.5 affected —
16.6.4a affected —
16.6.5a affected —
16.6.6 affected —
16.6.7 affected —
16.6.8 affected —
16.6.9 affected —
16.6.10 affected —
16.7.1 affected —
16.7.1a affected —
16.7.1b affected —
16.7.2 affected —
16.7.3 affected —
16.7.4 affected —
16.8.1 affected —
16.8.1a affected —
16.8.1b affected —
16.8.1s affected —
16.8.1c affected —
16.8.1d affected —
16.8.2 affected —
16.8.1e affected —
16.8.3 affected —
16.9.1 affected —
16.9.2 affected —
16.9.1a affected —
16.9.1b affected —
16.9.1s affected —
16.9.3 affected —
16.9.4 affected —
16.9.3a affected —
16.9.5 affected —
16.9.5f affected —
16.9.6 affected —
16.9.7 affected —
16.9.8 affected —
16.10.1 affected —
16.10.1a affected —
16.10.1b affected —
16.10.1s affected —
16.10.1c affected —
16.10.1e affected —
16.10.1d affected —
16.10.2 affected —
16.10.1f affected —
16.10.1g affected —
16.10.3 affected —
3.10.0E affected —
3.10.1E affected —
3.10.0cE affected —
3.10.2E affected —
3.10.3E affected —
16.11.1 affected —
16.11.1a affected —
16.11.1b affected —
16.11.2 affected —
16.11.1s affected —
16.12.1 affected —
16.12.1s affected —
16.12.1a affected —
16.12.1c affected —
16.12.1w affected —
16.12.2 affected —
16.12.1y affected —
16.12.2a affected —
16.12.3 affected —
16.12.8 affected —
16.12.2s affected —
16.12.1x affected —
16.12.1t affected —
16.12.4 affected —
16.12.3s affected —
16.12.3a affected —
16.12.4a affected —
16.12.5 affected —
16.12.6 affected —
16.12.1z1 affected —
16.12.5a affected —
16.12.5b affected —
16.12.1z2 affected —
16.12.6a affected —
16.12.7 affected —
16.12.9 affected —
16.12.10 affected —
16.12.10a affected —
16.12.11 affected —
16.12.12 affected —
16.12.13 affected —
16.12.14 affected —
3.11.0E affected —
3.11.1E affected —
3.11.2E affected —
3.11.3E affected —
3.11.1aE affected —
3.11.4E affected —
3.11.3aE affected —
3.11.5E affected —
3.11.6E affected —
3.11.7E affected —
3.11.8E affected —
3.11.9E affected —
3.11.10E affected —
3.11.11E affected —
3.11.12E affected —
3.11.13E affected —
17.1.1 affected —
17.1.1a affected —
17.1.1s affected —
17.1.1t affected —
17.1.3 affected —
17.2.1 affected —
17.2.1r affected —
17.2.1a affected —
17.2.1v affected —
17.2.2 affected —
17.2.3 affected —
17.3.1 affected —
17.3.2 affected —
17.3.3 affected —
17.3.1a affected —
17.3.1w affected —
17.3.2a affected —
17.3.1x affected —
17.3.1z affected —
17.3.4 affected —
17.3.5 affected —
17.3.4a affected —
17.3.6 affected —
17.3.4b affected —
17.3.4c affected —
17.3.5a affected —
17.3.5b affected —
17.3.7 affected —
17.3.8 affected —
17.3.8a affected —
17.4.1 affected —
17.4.2 affected —
17.4.1a affected —
17.4.1b affected —
17.4.2a affected —
17.5.1 affected —
17.5.1a affected —
17.6.1 affected —
17.6.2 affected —
17.6.1w affected —
17.6.1a affected —
17.6.1x affected —
17.6.3 affected —
17.6.1y affected —
17.6.1z affected —
17.6.3a affected —
17.6.4 affected —
17.6.1z1 affected —
17.6.5 affected —
17.6.6 affected —
17.6.6a affected —
17.6.5a affected —
17.6.7 affected —
17.6.8 affected —
17.6.8a affected —
17.7.1 affected —
17.7.1a affected —
17.7.1b affected —
17.7.2 affected —
17.10.1 affected —
17.10.1a affected —
17.10.1b affected —
17.8.1 affected —
17.8.1a affected —
17.9.1 affected —
17.9.1w affected —
17.9.2 affected —
17.9.1a affected —
17.9.1x affected —
17.9.1y affected —
17.9.3 affected —
17.9.2a affected —
17.9.1x1 affected —
17.9.3a affected —
17.9.4 affected —
17.9.1y1 affected —
17.9.5 affected —
17.9.4a affected —
17.9.5a affected —
17.9.5b affected —
17.9.6 affected —
17.9.6a affected —
17.9.7 affected —
17.9.5e affected —
17.9.5f affected —
17.9.8 affected —
17.9.7a affected —
17.9.7b affected —
17.11.1 affected —
17.11.1a affected —
17.12.1 affected —
17.12.1w affected —
17.12.1a affected —
17.12.1x affected —
17.12.2 affected —
17.12.3 affected —
17.12.2a affected —
17.12.1y affected —
17.12.1z affected —
17.12.4 affected —
17.12.3a affected —
17.12.1z1 affected —
17.12.1z2 affected —
17.12.4a affected —
17.12.5 affected —
17.12.4b affected —
17.12.1z3 affected —
17.12.5a affected —
17.12.1z4 affected —
17.12.6 affected —
17.12.5b affected —
17.12.5c affected —
17.12.6a affected —
17.12.5d affected —
17.12.6b affected —
17.13.1 affected —
17.13.1a affected —
17.14.1 affected —
17.14.1a affected —
17.15.1 affected —
17.15.1w affected —
17.15.1a affected —
17.15.2 affected —
17.15.1b affected —
17.15.1x affected —
17.15.1z affected —
17.15.3 affected —
17.15.2c affected —
17.15.2a affected —
17.15.1y affected —
17.15.2b affected —
17.15.3a affected —
17.15.4 affected —
17.15.3b affected —
17.15.4d affected —
17.15.4e affected —
17.16.1 affected —
17.16.1a affected —
17.17.1 affected —
17.18.1 affected —
17.18.1w affected —
17.18.1a affected —
Cisco Cisco Secure Firewall Threat Defense (FTD) Software affected
Version Status Constraints
6.2.3 affected —
6.2.3.1 affected —
6.2.3.2 affected —
6.2.3.3 affected —
6.2.3.4 affected —
6.2.3.5 affected —
6.2.3.6 affected —
6.2.3.7 affected —
6.2.3.8 affected —
6.2.3.10 affected —
6.2.3.11 affected —
6.2.3.9 affected —
6.2.3.12 affected —
6.2.3.13 affected —
6.2.3.14 affected —
6.2.3.15 affected —
6.2.3.16 affected —
6.2.3.17 affected —
6.2.3.18 affected —
6.6.0 affected —
6.6.0.1 affected —
6.6.1 affected —
6.6.3 affected —
6.6.4 affected —
6.6.5 affected —
6.6.5.1 affected —
6.6.5.2 affected —
6.6.7 affected —
6.6.7.1 affected —
6.6.7.2 affected —
6.4.0 affected —
6.4.0.1 affected —
6.4.0.3 affected —
6.4.0.2 affected —
6.4.0.4 affected —
6.4.0.5 affected —
6.4.0.6 affected —
6.4.0.7 affected —
6.4.0.8 affected —
6.4.0.9 affected —
6.4.0.10 affected —
6.4.0.11 affected —
6.4.0.12 affected —
6.4.0.13 affected —
6.4.0.14 affected —
6.4.0.15 affected —
6.4.0.16 affected —
6.4.0.17 affected —
6.4.0.18 affected —
7.0.0 affected —
7.0.0.1 affected —
7.0.1 affected —
7.0.1.1 affected —
7.0.2 affected —
7.0.2.1 affected —
7.0.3 affected —
7.0.4 affected —
7.0.5 affected —
7.0.6 affected —
7.0.6.1 affected —
7.0.6.2 affected —
7.0.6.3 affected —
7.0.7 affected —
7.0.8 affected —
7.0.8.1 affected —
7.1.0 affected —
7.1.0.1 affected —
7.1.0.2 affected —
7.1.0.3 affected —
7.2.0 affected —
7.2.0.1 affected —
7.2.1 affected —
7.2.2 affected —
7.2.3 affected —
7.2.4 affected —
7.2.4.1 affected —
7.2.5 affected —
7.2.5.1 affected —
7.2.6 affected —
7.2.7 affected —
7.2.5.2 affected —
7.2.8 affected —
7.2.8.1 affected —
7.2.9 affected —
7.2.10 affected —
7.2.10.2 affected —
7.3.0 affected —
7.3.1 affected —
7.3.1.1 affected —
7.3.1.2 affected —
7.4.0 affected —
7.4.1 affected —
7.4.1.1 affected —
7.4.2 affected —
7.4.2.1 affected —
7.4.2.2 affected —
7.4.2.3 affected —
7.4.2.4 affected —
7.6.0 affected —
7.6.1 affected —
7.6.2 affected —
7.6.2.1 affected —
7.7.0 affected —
7.7.10 affected —
7.7.10.1 affected —

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK cve-icon cve-icon
History

Thu, 26 Mar 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 25 Mar 2026 22:00:00 +0000

Type Values Removed Values Added
Title Improper IKEv2 Packet Parsing Leading to Denial of Service

Wed, 25 Mar 2026 16:15:00 +0000

Type Values Removed Values Added
Description A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Weaknesses CWE-401
References
Metrics cvssV3_1

{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-03-26T17:37:50.517Z

Reserved: 2025-10-08T11:59:15.350Z

Link: CVE-2026-20012

cve-icon Vulnrichment

Updated: 2026-03-26T17:37:44.994Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-03-25T16:16:10.957

Modified: 2026-03-26T15:13:33.940

Link: CVE-2026-20012

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-03-25T21:30:56Z

Weaknesses