Denial of Service Vulnerability in Cisco IOS XE Software's IKEv1 Implementation

CVE-2025-20192

What is CVE-2025-20192?

A vulnerability exists in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software, which could be exploited by an authenticated, remote attacker to induce a denial of service (DoS) condition. This issue is attributed to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is forwarded to the hardware cryptographic accelerator. An attacker with valid IKEv1 VPN credentials may exploit this vulnerability by sending specially crafted IKEv1 messages, potentially resulting in the affected device reloading and disrupting services.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References