Memory Leak Vulnerability in Cisco IOS and ASA Software
CVE-2025-20239

8.6HIGH

Key Information:

Vendor

Cisco
Status
iOS
Cisco Adaptive Security Appliance (asa) Software
Cisco iOS Xe Software
Cisco Firepower Threat Defense Software
Vendor
CVE Published:
14 August 2025

Badges

👾 Exploit Exists

What is CVE-2025-20239?

A vulnerability exists in the IKEv2 feature of Cisco IOS and ASA Software that allows an unauthenticated attacker to exploit a flaw in packet processing. By sending specially crafted IKEv2 packets, the attacker can trigger a memory leak, potentially causing the affected device to reload unexpectedly. In the case of Cisco ASA and FTD Software, the exploit may lead to partial exhaustion of the system memory, negatively impacting system stability and preventing the establishment of new IKEv2 VPN sessions. To recover from the resulting denial of service condition, a manual reboot of the affected device is necessary.

Affected Version(s)

Cisco Adaptive Security Appliance (ASA) Software 9.8.1

Cisco Adaptive Security Appliance (ASA) Software 9.8.1.5

Cisco Adaptive Security Appliance (ASA) Software 9.8.1.7

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20239 : Memory Leak Vulnerability in Cisco IOS and ASA Software