OpenCVE

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key. This vulnerability is due to insufficient input validation when processing OSPF link-state update (LSU) packets. An attacker could exploit this vulnerability by sending crafted OSPF LSU packets. A successful exploit could allow the attacker to corrupt the heap, causing the device to reload, resulting in a DoS condition.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW

History

Wed, 04 Mar 2026 19:00:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key. This vulnerability is due to insufficient input validation when processing OSPF link-state update (LSU) packets. An attacker could exploit this vulnerability by sending crafted OSPF LSU packets. A successful exploit could allow the attacker to corrupt the heap, causing the device to reload, resulting in a DoS condition.
Weaknesses		CWE-190
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW
Metrics		cvssV3_1 `{'score': 6.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-03-04T18:36:02.331Z

Updated: 2026-03-04T21:35:13.593Z

Reserved: 2025-10-08T11:59:15.352Z

Link: CVE-2026-20025

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-03-04T19:16:15.547

Modified: 2026-03-04T19:16:15.547

Link: CVE-2026-20025

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20025", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.352Z", "datePublished": "2026-03-04T18:36:02.331Z", "dateUpdated": "2026-03-04T21:35:13.593Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-03-04T18:36:02.331Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition. To exploit this vulnerability, the attacker must have the OSPF secret key.\r\n\r This vulnerability is due to insufficient input validation when processing OSPF link-state update (LSU) packets. An attacker could exploit this vulnerability by sending crafted OSPF LSU packets. A successful exploit could allow the attacker to corrupt the heap, causing the device to reload, resulting in a DoS condition."}], "affected": [{"vendor": "Cisco", "product": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "versions": [{"version": "9.12.1", "status": "affected"}, {"version": "9.12.1.2", "status": "affected"}, {"version": "9.12.1.3", "status": "affected"}, {"version": "9.12.2", "status": "affected"}, {"version": "9.12.2.4", "status": "affected"}, {"version": "9.12.2.5", "status": "affected"}, {"version": "9.12.2.9", "status": "affected"}, {"version": "9.12.3", "status": "affected"}, {"version": "9.12.3.2", "status": "affected"}, {"version": "9.12.3.7", "status": "affected"}, {"version": "9.12.4", "status": "affected"}, {"version": "9.12.3.12", "status": "affected"}, {"version": "9.12.3.9", "status": "affected"}, {"version": "9.12.2.1", "status": "affected"}, {"version": "9.12.4.2", "status": "affected"}, {"version": "9.12.4.4", "status": "affected"}, {"version": "9.12.4.7", "status": "affected"}, {"version": "9.12.4.10", "status": "affected"}, {"version": "9.12.4.13", "status": "affected"}, {"version": "9.12.4.8", "status": "affected"}, {"version": "9.12.4.18", "status": "affected"}, {"version": "9.12.4.24", "status": "affected"}, {"version": "9.12.4.26", "status": "affected"}, {"version": "9.12.4.29", "status": "affected"}, {"version": "9.12.4.30", "status": "affected"}, {"version": "9.12.4.35", "status": "affected"}, {"version": "9.12.4.37", "status": "affected"}, {"version": "9.12.4.38", "status": "affected"}, {"version": "9.12.4.39", "status": "affected"}, {"version": "9.12.4.40", "status": "affected"}, {"version": "9.12.4.41", "status": "affected"}, {"version": "9.12.4.47", "status": "affected"}, {"version": "9.12.4.48", "status": "affected"}, {"version": "9.12.4.50", "status": "affected"}, {"version": "9.12.4.52", "status": "affected"}, {"version": "9.12.4.54", "status": "affected"}, {"version": "9.12.4.55", "status": "affected"}, {"version": "9.12.4.56", "status": "affected"}, {"version": "9.12.4.58", "status": "affected"}, {"version": "9.12.4.62", "status": "affected"}, {"version": "9.12.4.65", "status": "affected"}, {"version": "9.12.4.67", "status": "affected"}, {"version": "9.16.1", "status": "affected"}, {"version": "9.16.1.28", "status": "affected"}, {"version": "9.16.2", "status": "affected"}, {"version": "9.16.2.3", "status": "affected"}, {"version": "9.16.2.7", "status": "affected"}, {"version": "9.16.2.11", "status": "affected"}, {"version": "9.16.2.13", "status": "affected"}, {"version": "9.16.2.14", "status": "affected"}, {"version": "9.16.3", "status": "affected"}, {"version": "9.16.3.3", "status": "affected"}, {"version": "9.16.3.14", "status": "affected"}, {"version": "9.16.3.15", "status": "affected"}, {"version": "9.16.3.19", "status": "affected"}, {"version": "9.16.3.23", "status": "affected"}, {"version": "9.16.4", "status": "affected"}, {"version": "9.16.4.9", "status": "affected"}, {"version": "9.16.4.14", "status": "affected"}, {"version": "9.16.4.19", "status": "affected"}, {"version": "9.16.4.27", "status": "affected"}, {"version": "9.16.4.38", "status": "affected"}, {"version": "9.16.4.39", "status": "affected"}, {"version": "9.16.4.42", "status": "affected"}, {"version": "9.16.4.48", "status": "affected"}, {"version": "9.16.4.55", "status": "affected"}, {"version": "9.16.4.57", "status": "affected"}, {"version": "9.16.4.61", "status": "affected"}, {"version": "9.16.4.62", "status": "affected"}, {"version": "9.16.4.67", "status": "affected"}, {"version": "9.16.4.70", "status": "affected"}, {"version": "9.16.4.71", "status": "affected"}, {"version": "9.16.4.76", "status": "affected"}, {"version": "9.16.4.82", "status": "affected"}, {"version": "9.16.4.84", "status": "affected"}, {"version": "9.17.1", "status": "affected"}, {"version": "9.17.1.7", "status": "affected"}, {"version": "9.17.1.9", "status": "affected"}, {"version": "9.17.1.10", "status": "affected"}, {"version": "9.17.1.11", "status": "affected"}, {"version": "9.17.1.13", "status": "affected"}, {"version": "9.17.1.15", "status": "affected"}, {"version": "9.17.1.20", "status": "affected"}, {"version": "9.17.1.30", "status": "affected"}, {"version": "9.17.1.33", "status": "affected"}, {"version": "9.17.1.39", "status": "affected"}, {"version": "9.17.1.45", "status": "affected"}, {"version": "9.17.1.46", "status": "affected"}, {"version": "9.18.1", "status": "affected"}, {"version": "9.18.1.3", "status": "affected"}, {"version": "9.18.2", "status": "affected"}, {"version": "9.18.2.5", "status": "affected"}, {"version": "9.18.2.7", "status": "affected"}, {"version": "9.18.2.8", "status": "affected"}, {"version": "9.18.3", "status": "affected"}, {"version": "9.18.3.39", "status": "affected"}, {"version": "9.18.3.46", "status": "affected"}, {"version": "9.18.3.53", "status": "affected"}, {"version": "9.18.3.55", "status": "affected"}, {"version": "9.18.3.56", "status": "affected"}, {"version": "9.18.4", "status": "affected"}, {"version": "9.18.4.5", "status": "affected"}, {"version": "9.18.4.8", "status": "affected"}, {"version": "9.18.4.22", "status": "affected"}, {"version": "9.18.4.24", "status": "affected"}, {"version": "9.18.4.29", "status": "affected"}, {"version": "9.18.4.34", "status": "affected"}, {"version": "9.18.4.40", "status": "affected"}, {"version": "9.18.4.47", "status": "affected"}, {"version": "9.18.4.50", "status": "affected"}, {"version": "9.18.4.52", "status": "affected"}, {"version": "9.18.4.53", "status": "affected"}, {"version": "9.18.4.57", "status": "affected"}, {"version": "9.18.4.66", "status": "affected"}, {"version": "9.18.4.67", "status": "affected"}, {"version": "9.18.4.68", "status": "affected"}, {"version": "9.19.1", "status": "affected"}, {"version": "9.19.1.5", "status": "affected"}, {"version": "9.19.1.9", "status": "affected"}, {"version": "9.19.1.12", "status": "affected"}, {"version": "9.19.1.18", "status": "affected"}, {"version": "9.19.1.22", "status": "affected"}, {"version": "9.19.1.24", "status": "affected"}, {"version": "9.19.1.27", "status": "affected"}, {"version": "9.19.1.28", "status": "affected"}, {"version": "9.19.1.31", "status": "affected"}, {"version": "9.19.1.37", "status": "affected"}, {"version": "9.19.1.38", "status": "affected"}, {"version": "9.19.1.42", "status": "affected"}, {"version": "9.20.1", "status": "affected"}, {"version": "9.20.1.5", "status": "affected"}, {"version": "9.20.2", "status": "affected"}, {"version": "9.20.2.10", "status": "affected"}, {"version": "9.20.2.21", "status": "affected"}, {"version": "9.20.2.22", "status": "affected"}, {"version": "9.20.3", "status": "affected"}, {"version": "9.20.3.4", "status": "affected"}, {"version": "9.20.3.7", "status": "affected"}, {"version": "9.20.3.9", "status": "affected"}, {"version": "9.20.3.10", "status": "affected"}, {"version": "9.20.3.13", "status": "affected"}, {"version": "9.20.3.16", "status": "affected"}, {"version": "9.20.3.20", "status": "affected"}, {"version": "9.20.4", "status": "affected"}, {"version": "9.20.4.7", "status": "affected"}, {"version": "9.22.1.1", "status": "affected"}, {"version": "9.22.1.3", "status": "affected"}, {"version": "9.22.1.2", "status": "affected"}, {"version": "9.22.1.6", "status": "affected"}, {"version": "9.22.2", "status": "affected"}, {"version": "9.22.2.4", "status": "affected"}, {"version": "9.22.2.9", "status": "affected"}, {"version": "9.23.1", "status": "affected"}, {"version": "9.23.1.3", "status": "affected"}, {"version": "9.23.1.7", "status": "affected"}, {"version": "9.23.1.13", "status": "affected"}]}, {"vendor": "Cisco", "product": "Cisco Secure Firewall Threat Defense (FTD) Software", "versions": [{"version": "6.4.0", "status": "affected"}, {"version": "6.4.0.1", "status": "affected"}, {"version": "6.4.0.3", "status": "affected"}, {"version": "6.4.0.2", "status": "affected"}, {"version": "6.4.0.4", "status": "affected"}, {"version": "6.4.0.5", "status": "affected"}, {"version": "6.4.0.6", "status": "affected"}, {"version": "6.4.0.7", "status": "affected"}, {"version": "6.4.0.8", "status": "affected"}, {"version": "6.4.0.9", "status": "affected"}, {"version": "6.4.0.10", "status": "affected"}, {"version": "6.4.0.11", "status": "affected"}, {"version": "6.4.0.12", "status": "affected"}, {"version": "6.4.0.13", "status": "affected"}, {"version": "6.4.0.14", "status": "affected"}, {"version": "6.4.0.15", "status": "affected"}, {"version": "6.4.0.16", "status": "affected"}, {"version": "6.4.0.17", "status": "affected"}, {"version": "6.4.0.18", "status": "affected"}, {"version": "7.0.0", "status": "affected"}, {"version": "7.0.0.1", "status": "affected"}, {"version": "7.0.1", "status": "affected"}, {"version": "7.0.1.1", "status": "affected"}, {"version": "7.0.2", "status": "affected"}, {"version": "7.0.2.1", "status": "affected"}, {"version": "7.0.3", "status": "affected"}, {"version": "7.0.4", "status": "affected"}, {"version": "7.0.5", "status": "affected"}, {"version": "7.0.6", "status": "affected"}, {"version": "7.0.6.1", "status": "affected"}, {"version": "7.0.6.2", "status": "affected"}, {"version": "7.0.6.3", "status": "affected"}, {"version": "7.0.7", "status": "affected"}, {"version": "7.0.8", "status": "affected"}, {"version": "7.0.8.1", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "7.1.0.1", "status": "affected"}, {"version": "7.1.0.2", "status": "affected"}, {"version": "7.1.0.3", "status": "affected"}, {"version": "7.2.0", "status": "affected"}, {"version": "7.2.0.1", "status": "affected"}, {"version": "7.2.1", "status": "affected"}, {"version": "7.2.2", "status": "affected"}, {"version": "7.2.3", "status": "affected"}, {"version": "7.2.4", "status": "affected"}, {"version": "7.2.4.1", "status": "affected"}, {"version": "7.2.5", "status": "affected"}, {"version": "7.2.5.1", "status": "affected"}, {"version": "7.2.6", "status": "affected"}, {"version": "7.2.7", "status": "affected"}, {"version": "7.2.5.2", "status": "affected"}, {"version": "7.2.8", "status": "affected"}, {"version": "7.2.8.1", "status": "affected"}, {"version": "7.2.9", "status": "affected"}, {"version": "7.2.10", "status": "affected"}, {"version": "7.2.10.2", "status": "affected"}, {"version": "7.3.0", "status": "affected"}, {"version": "7.3.1", "status": "affected"}, {"version": "7.3.1.1", "status": "affected"}, {"version": "7.3.1.2", "status": "affected"}, {"version": "7.4.0", "status": "affected"}, {"version": "7.4.1", "status": "affected"}, {"version": "7.4.1.1", "status": "affected"}, {"version": "7.4.2", "status": "affected"}, {"version": "7.4.2.1", "status": "affected"}, {"version": "7.4.2.2", "status": "affected"}, {"version": "7.4.2.3", "status": "affected"}, {"version": "7.4.2.4", "status": "affected"}, {"version": "7.6.0", "status": "affected"}, {"version": "7.6.1", "status": "affected"}, {"version": "7.6.2", "status": "affected"}, {"version": "7.6.2.1", "status": "affected"}, {"version": "7.7.0", "status": "affected"}, {"version": "7.7.10", "status": "affected"}, {"version": "7.7.10.1", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Integer Overflow or Wraparound", "type": "cwe", "cweId": "CWE-190"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ospf-ZH8PhbSW", "name": "cisco-sa-asaftd-ospf-ZH8PhbSW"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "baseScore": 6.8, "baseSeverity": "MEDIUM", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-asaftd-ospf-ZH8PhbSW", "discovery": "INTERNAL", "defects": ["CSCwn69078"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-04T21:34:51.512247Z", "id": "CVE-2026-20025", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-04T21:35:13.593Z"}}]}}