Memory Exhaustion Vulnerability in Cisco Secure Firewall ASA and FTD Software

CVE-2025-20135

What is CVE-2025-20135?

A vulnerability in the DHCP client functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to exploit improper validation of incoming DHCP packets. By sending specifically crafted DHCPv4 packets repeatedly to an affected device, an attacker could exhaust the available memory. This condition would impact the availability of services, preventing new processes from starting, and resulting in a Denial of Service (DoS) situation that necessitates a manual reboot of the affected device.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References