Denial of Service Vulnerability in Cisco Security Software
CVE-2025-20182

8.6HIGH

Key Information:

Vendor
Cisco
Status
Cisco Adaptive Security Appliance (asa) Software
Cisco Firepower Threat Defense Software
Vendor
CVE Published:
7 May 2025

Badges

👾 Exploit Exists

Summary

A vulnerability in the processing of Internet Key Exchange version 2 (IKEv2) messages in various Cisco software platforms could be exploited by remote attackers. This vulnerability is due to inadequate input validation when handling IKEv2 traffic. By sending specially crafted IKEv2 messages to an affected device, an attacker could induce a reload of the device, leading to an operational outage. Organizations using affected Cisco software should apply the necessary patches to mitigate potential risks.

Affected Version(s)

Cisco Adaptive Security Appliance (ASA) Software 9.12.3

Cisco Adaptive Security Appliance (ASA) Software 9.8.3

Cisco Adaptive Security Appliance (ASA) Software 9.12.1

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20182 : Denial of Service Vulnerability in Cisco Security Software | SecurityVulnerability.io