Denial of Service Vulnerability in Cisco Security Software
CVE-2025-20182
8.6HIGH
What is CVE-2025-20182?
A vulnerability in the processing of Internet Key Exchange version 2 (IKEv2) messages in various Cisco software platforms could be exploited by remote attackers. This vulnerability is due to inadequate input validation when handling IKEv2 traffic. By sending specially crafted IKEv2 messages to an affected device, an attacker could induce a reload of the device, leading to an operational outage. Organizations using affected Cisco software should apply the necessary patches to mitigate potential risks.
Affected Version(s)
Cisco Adaptive Security Appliance (ASA) Software 9.12.3
Cisco Adaptive Security Appliance (ASA) Software 9.8.3
Cisco Adaptive Security Appliance (ASA) Software 9.12.1