Memory Leak Vulnerability in Cisco Secure Firewall IKEv2 Module
CVE-2025-20252

5.8MEDIUM

Key Information:

Vendor

Cisco
Status
Cisco Adaptive Security Appliance (asa) Software
Cisco Firepower Threat Defense Software
Vendor
CVE Published:
14 August 2025

Badges

👾 Exploit Exists

What is CVE-2025-20252?

A vulnerability exists in the IKEv2 module of Cisco's Secure Firewall software, allowing unauthenticated remote attackers to exploit improper parsing of IKEv2 packets. By sending a continuous stream of specially crafted packets, an attacker may partially exhaust system memory, resulting in device instability and a denial of service condition. This leads to disruptions, such as the inability to establish new IKEv2 VPN sessions, requiring a manual reboot for recovery.

Affected Version(s)

Cisco Adaptive Security Appliance (ASA) Software 9.8.4.15

Cisco Adaptive Security Appliance (ASA) Software 9.8.4.17

Cisco Adaptive Security Appliance (ASA) Software 9.8.4.25

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20252 : Memory Leak Vulnerability in Cisco Secure Firewall IKEv2 Module