CVE-2025-20224Medium· 5.8▾ SunlitA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 31.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 18.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
0.7% → 0.7%
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to partially exhaust system memory, causing system instability like being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
secure_firewall_threat_defense = 6.2.3secure_firewall_threat_defense = 6.2.3.1secure_firewall_threat_defense = 6.2.3.2secure_firewall_threat_defense = 6.2.3.3secure_firewall_threat_defense = 6.2.3.4secure_firewall_threat_defense = 6.2.3.5secure_firewall_threat_defense = 6.2.3.6secure_firewall_threat_defense = 6.2.3.7secure_firewall_threat_defense = 6.2.3.8secure_firewall_threat_defense = 6.2.3.9secure_firewall_threat_defense = 6.2.3.10secure_firewall_threat_defense = 6.2.3.11secure_firewall_threat_defense = 6.2.3.12secure_firewall_threat_defense = 6.2.3.13secure_firewall_threat_defense = 6.2.3.14secure_firewall_threat_defense = 6.2.3.15secure_firewall_threat_defense = 6.2.3.16secure_firewall_threat_defense = 6.2.3.17secure_firewall_threat_defense = 6.2.3.18secure_firewall_threat_defense = 6.4.0secure_firewall_threat_defense = 6.4.0.1secure_firewall_threat_defense = 6.4.0.2secure_firewall_threat_defense = 6.4.0.3secure_firewall_threat_defense = 6.4.0.4secure_firewall_threat_defense = 6.4.0.5secure_firewall_threat_defense = 6.4.0.6secure_firewall_threat_defense = 6.4.0.7secure_firewall_threat_defense = 6.4.0.8secure_firewall_threat_defense = 6.4.0.9secure_firewall_threat_defense = 6.4.0.10secure_firewall_threat_defense = 6.4.0.11secure_firewall_threat_defense = 6.4.0.12secure_firewall_threat_defense = 6.4.0.13secure_firewall_threat_defense = 6.4.0.14secure_firewall_threat_defense = 6.4.0.15secure_firewall_threat_defense = 6.4.0.16secure_firewall_threat_defense = 6.4.0.17secure_firewall_threat_defense = 6.4.0.18secure_firewall_threat_defense = 6.6.0secure_firewall_threat_defense = 6.6.0.1secure_firewall_threat_defense = 6.6.1secure_firewall_threat_defense = 6.6.3secure_firewall_threat_defense = 6.6.4secure_firewall_threat_defense = 6.6.5secure_firewall_threat_defense = 6.6.5.1secure_firewall_threat_defense = 6.6.5.2secure_firewall_threat_defense = 6.6.7secure_firewall_threat_defense = 6.6.7.1secure_firewall_threat_defense = 6.6.7.2secure_firewall_threat_defense = 7.0.0secure_firewall_threat_defense = 7.0.0.1secure_firewall_threat_defense = 7.0.1secure_firewall_threat_defense = 7.0.1.1secure_firewall_threat_defense = 7.0.2secure_firewall_threat_defense = 7.0.2.1secure_firewall_threat_defense = 7.0.3secure_firewall_threat_defense = 7.0.4secure_firewall_threat_defense = 7.0.5secure_firewall_threat_defense = 7.0.6secure_firewall_threat_defense = 7.0.6.1secure_firewall_threat_defense = 7.0.6.2secure_firewall_threat_defense = 7.0.6.3secure_firewall_threat_defense = 7.0.7secure_firewall_threat_defense = 7.1.0secure_firewall_threat_defense = 7.1.0.1secure_firewall_threat_defense = 7.1.0.2secure_firewall_threat_defense = 7.1.0.3secure_firewall_threat_defense = 7.2.0secure_firewall_threat_defense = 7.2.0.1secure_firewall_threat_defense = 7.2.1secure_firewall_threat_defense = 7.2.2secure_firewall_threat_defense = 7.2.3secure_firewall_threat_defense = 7.2.4secure_firewall_threat_defense = 7.2.4.1secure_firewall_threat_defense = 7.2.5secure_firewall_threat_defense = 7.2.5.1secure_firewall_threat_defense = 7.2.5.2secure_firewall_threat_defense = 7.2.6secure_firewall_threat_defense = 7.2.7secure_firewall_threat_defense = 7.2.8secure_firewall_threat_defense = 7.2.8.1secure_firewall_threat_defense = 7.2.9secure_firewall_threat_defense = 7.3.0secure_firewall_threat_defense = 7.3.1secure_firewall_threat_defense = 7.3.1.1secure_firewall_threat_defense = 7.3.1.2secure_firewall_threat_defense = 7.4.0secure_firewall_threat_defense = 7.4.1secure_firewall_threat_defense = 7.4.1.1secure_firewall_threat_defense = 7.4.2secure_firewall_threat_defense = 7.4.2.1secure_firewall_threat_defense = 7.4.2.2secure_firewall_threat_defense = 7.6.0secure_firewall_threat_defense = 7.7.0adaptive_security_appliance_software = 9.8.1adaptive_security_appliance_software = 9.8.1.5adaptive_security_appliance_software = 9.8.1.7adaptive_security_appliance_software = 9.8.2adaptive_security_appliance_software = 9.8.2.8adaptive_security_appliance_software = 9.8.2.14Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-3585Medium· 5.3A vulnerability in the TLS handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 1000 Series firewalls could allow an unauthenticated, remote attacker to gain ac…
CVE-2026-20321Medium· 6.5A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary commands as the root user
CVE-2026-76471Critical· 9.8A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service (DoS) condition on an affected device. The…
CVE-2026-76486Critical· 9.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Deni…
CVE-2026-76485Critical· 9.8A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a Deni…
CVE-2026-76501Critical· 9.8A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root…