Memory Leak Vulnerability in Cisco Secure Firewall Products

CVE-2025-20254

What is CVE-2025-20254?

A vulnerability exists in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software. This issue arises from improper parsing of IKEv2 packets, allowing an unauthenticated remote attacker to exploit the vulnerability by sending a constant stream of specially crafted IKEv2 packets to an affected device. Successful exploitation can lead to a memory leak, causing system instability and preventing the establishment of new IKEv2 VPN sessions. To recover from this condition, a manual reboot of the device is necessary.

References