CVE-2026-20012 - Vulnerability Details

- Improper IKEv2 Packet Parsing Leading to Denial of Service

Description

A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

Published: 2026-03-25

Score: 8.6 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

IOS

affected

Version	Status	Constraints
`15.2(1)S`	affected	—
`15.2(2)S`	affected	—
`15.2(1)S1`	affected	—
`15.2(4)S`	affected	—
`15.2(1)S2`	affected	—
`15.2(2)S1`	affected	—
`15.2(2)S2`	affected	—
`15.2(2)S0a`	affected	—
`15.2(2)S0c`	affected	—
`15.2(4)S1`	affected	—
`15.2(4)S4`	affected	—
`15.2(4)S6`	affected	—
`15.2(4)S2`	affected	—
`15.2(4)S5`	affected	—
`15.2(4)S3`	affected	—
`15.2(4)S3a`	affected	—
`15.2(4)S4a`	affected	—
`15.2(4)S7`	affected	—
`15.3(1)T`	affected	—
`15.3(2)T`	affected	—
`15.3(1)T1`	affected	—
`15.3(1)T2`	affected	—
`15.3(1)T3`	affected	—
`15.3(1)T4`	affected	—
`15.3(2)T1`	affected	—
`15.3(2)T2`	affected	—
`15.3(2)T3`	affected	—
`15.3(2)T4`	affected	—
`15.0(2)EY`	affected	—
`15.0(2)EY1`	affected	—
`15.0(2)EY2`	affected	—
`15.0(2)EY3`	affected	—
`15.1(2)S`	affected	—
`15.1(1)S`	affected	—
`15.1(1)S1`	affected	—
`15.1(3)S`	affected	—
`15.1(1)S2`	affected	—
`15.1(2)S1`	affected	—
`15.1(2)S2`	affected	—
`15.1(3)S1`	affected	—
`15.1(3)S0a`	affected	—
`15.1(3)S2`	affected	—
`15.1(3)S4`	affected	—
`15.1(3)S3`	affected	—
`15.1(3)S5`	affected	—
`15.1(3)S6`	affected	—
`15.1(3)S5a`	affected	—
`15.1(4)M3`	affected	—
`15.1(4)M`	affected	—
`15.1(4)M1`	affected	—
`15.1(4)M2`	affected	—
`15.1(4)M6`	affected	—
`15.1(4)M5`	affected	—
`15.1(4)M4`	affected	—
`15.1(4)M7`	affected	—
`15.1(4)M3a`	affected	—
`15.1(4)M10`	affected	—
`15.1(4)M8`	affected	—
`15.1(4)M9`	affected	—
`15.0(2)SE`	affected	—
`15.0(2)SE1`	affected	—
`15.0(2)SE2`	affected	—
`15.0(2)SE3`	affected	—
`15.0(2)SE4`	affected	—
`15.0(2)SE5`	affected	—
`15.0(2)SE6`	affected	—
`15.0(2)SE7`	affected	—
`15.0(2)SE8`	affected	—
`15.0(2)SE9`	affected	—
`15.0(2)SE10`	affected	—
`15.0(2)SE11`	affected	—
`15.0(2)SE10a`	affected	—
`15.0(2)SE12`	affected	—
`15.0(2)SE13`	affected	—
`15.1(2)GC`	affected	—
`15.1(2)GC1`	affected	—
`15.1(2)GC2`	affected	—
`15.1(4)GC`	affected	—
`15.1(4)GC1`	affected	—
`15.1(4)GC2`	affected	—
`15.1(1)SG`	affected	—
`15.1(2)SG`	affected	—
`15.1(1)SG1`	affected	—
`15.1(1)SG2`	affected	—
`15.1(2)SG1`	affected	—
`15.1(2)SG2`	affected	—
`15.1(2)SG3`	affected	—
`15.1(2)SG4`	affected	—
`15.1(2)SG5`	affected	—
`15.1(2)SG6`	affected	—
`15.1(2)SG7`	affected	—
`15.1(2)SG8`	affected	—
`15.2(4)M`	affected	—
`15.2(4)M1`	affected	—
`15.2(4)M2`	affected	—
`15.2(4)M4`	affected	—
`15.2(4)M3`	affected	—
`15.2(4)M5`	affected	—
`15.2(4)M8`	affected	—
`15.2(4)M10`	affected	—
`15.2(4)M7`	affected	—
`15.2(4)M6`	affected	—
`15.2(4)M9`	affected	—
`15.2(4)M6a`	affected	—
`15.2(4)M11`	affected	—
`15.2(1)GC`	affected	—
`15.2(1)GC1`	affected	—
`15.2(1)GC2`	affected	—
`15.2(2)GC`	affected	—
`15.2(3)GC`	affected	—
`15.2(3)GC1`	affected	—
`15.2(4)GC`	affected	—
`15.2(4)GC1`	affected	—
`15.2(4)GC2`	affected	—
`15.2(4)GC3`	affected	—
`15.1(1)SY`	affected	—
`15.1(1)SY1`	affected	—
`15.1(2)SY`	affected	—
`15.1(2)SY1`	affected	—
`15.1(2)SY2`	affected	—
`15.1(1)SY2`	affected	—
`15.1(1)SY3`	affected	—
`15.1(2)SY3`	affected	—
`15.1(1)SY4`	affected	—
`15.1(2)SY4`	affected	—
`15.1(1)SY5`	affected	—
`15.1(2)SY5`	affected	—
`15.1(2)SY4a`	affected	—
`15.1(1)SY6`	affected	—
`15.1(2)SY6`	affected	—
`15.1(2)SY7`	affected	—
`15.1(2)SY8`	affected	—
`15.1(2)SY9`	affected	—
`15.1(2)SY10`	affected	—
`15.1(2)SY11`	affected	—
`15.1(2)SY12`	affected	—
`15.1(2)SY13`	affected	—
`15.1(2)SY14`	affected	—
`15.1(2)SY15`	affected	—
`15.1(2)SY16`	affected	—
`15.3(1)S`	affected	—
`15.3(2)S`	affected	—
`15.3(3)S`	affected	—
`15.3(1)S2`	affected	—
`15.3(1)S1`	affected	—
`15.3(2)S2`	affected	—
`15.3(2)S1`	affected	—
`15.3(3)S1`	affected	—
`15.3(3)S2`	affected	—
`15.3(3)S3`	affected	—
`15.3(3)S6`	affected	—
`15.3(3)S4`	affected	—
`15.3(3)S1a`	affected	—
`15.3(3)S5`	affected	—
`15.3(3)S7`	affected	—
`15.3(3)S8`	affected	—
`15.3(3)S9`	affected	—
`15.3(3)S10`	affected	—
`15.3(3)S8a`	affected	—
`15.4(1)T`	affected	—
`15.4(2)T`	affected	—
`15.4(1)T2`	affected	—
`15.4(1)T1`	affected	—
`15.4(1)T3`	affected	—
`15.4(2)T1`	affected	—
`15.4(2)T3`	affected	—
`15.4(2)T2`	affected	—
`15.4(1)T4`	affected	—
`15.4(2)T4`	affected	—
`15.0(2)EA`	affected	—
`15.0(2)EA1`	affected	—
`15.2(1)E`	affected	—
`15.2(2)E`	affected	—
`15.2(1)E1`	affected	—
`15.2(3)E`	affected	—
`15.2(1)E2`	affected	—
`15.2(1)E3`	affected	—
`15.2(2)E1`	affected	—
`15.2(4)E`	affected	—
`15.2(3)E1`	affected	—
`15.2(2)E2`	affected	—
`15.2(2a)E1`	affected	—
`15.2(2)E3`	affected	—
`15.2(2a)E2`	affected	—
`15.2(3)E2`	affected	—
`15.2(3a)E`	affected	—
`15.2(3)E3`	affected	—
`15.2(4)E1`	affected	—
`15.2(2)E4`	affected	—
`15.2(2)E5`	affected	—
`15.2(4)E2`	affected	—
`15.2(3)E4`	affected	—
`15.2(5)E`	affected	—
`15.2(4)E3`	affected	—
`15.2(2)E6`	affected	—
`15.2(5a)E`	affected	—
`15.2(5)E1`	affected	—
`15.2(5b)E`	affected	—
`15.2(2)E5a`	affected	—
`15.2(5c)E`	affected	—
`15.2(2)E5b`	affected	—
`15.2(5a)E1`	affected	—
`15.2(4)E4`	affected	—
`15.2(2)E7`	affected	—
`15.2(5)E2`	affected	—
`15.2(6)E`	affected	—
`15.2(4)E5`	affected	—
`15.2(5)E2c`	affected	—
`15.2(2)E8`	affected	—
`15.2(6)E0a`	affected	—
`15.2(6)E1`	affected	—
`15.2(6)E0c`	affected	—
`15.2(4)E6`	affected	—
`15.2(6)E2`	affected	—
`15.2(2)E9`	affected	—
`15.2(4)E7`	affected	—
`15.2(7)E`	affected	—
`15.2(2)E10`	affected	—
`15.2(4)E8`	affected	—
`15.2(6)E2a`	affected	—
`15.2(6)E2b`	affected	—
`15.2(7)E1`	affected	—
`15.2(7)E0a`	affected	—
`15.2(7)E0b`	affected	—
`15.2(7)E0s`	affected	—
`15.2(6)E3`	affected	—
`15.2(4)E9`	affected	—
`15.2(7)E2`	affected	—
`15.2(7a)E0b`	affected	—
`15.2(4)E10`	affected	—
`15.2(7)E3`	affected	—
`15.2(7)E1a`	affected	—
`15.2(7b)E0b`	affected	—
`15.2(7)E2a`	affected	—
`15.2(4)E10a`	affected	—
`15.2(7)E4`	affected	—
`15.2(7)E3k`	affected	—
`15.2(8)E`	affected	—
`15.2(8)E1`	affected	—
`15.2(7)E5`	affected	—
`15.2(7)E6`	affected	—
`15.2(8)E2`	affected	—
`15.2(4)E10d`	affected	—
`15.2(7)E7`	affected	—
`15.2(8)E3`	affected	—
`15.2(7)E8`	affected	—
`15.2(8)E4`	affected	—
`15.2(7)E9`	affected	—
`15.2(8)E5`	affected	—
`15.2(8)E6`	affected	—
`15.2(7)E10`	affected	—
`15.2(7)E11`	affected	—
`15.2(8)E7`	affected	—
`15.2(7)E12`	affected	—
`15.2(8)E8`	affected	—
`15.2(7)E13`	affected	—
`15.2(2)JB`	affected	—
`15.2(2)JB2`	affected	—
`15.2(4)JB`	affected	—
`15.2(2)JB3`	affected	—
`15.2(4)JB1`	affected	—
`15.2(4)JB3`	affected	—
`15.2(4)JB3a`	affected	—
`15.2(2)JB4`	affected	—
`15.2(4)JB4`	affected	—
`15.2(4)JB3b`	affected	—
`15.2(4)JB3s`	affected	—
`15.2(4)JB5`	affected	—
`15.2(4)JB5m`	affected	—
`15.2(4)JB6`	affected	—
`15.2(2)JB5`	affected	—
`15.2(2)JB6`	affected	—
`15.4(1)S`	affected	—
`15.4(2)S`	affected	—
`15.4(3)S`	affected	—
`15.4(1)S1`	affected	—
`15.4(1)S2`	affected	—
`15.4(2)S1`	affected	—
`15.4(1)S3`	affected	—
`15.4(3)S1`	affected	—
`15.4(2)S2`	affected	—
`15.4(3)S2`	affected	—
`15.4(3)S3`	affected	—
`15.4(1)S4`	affected	—
`15.4(2)S3`	affected	—
`15.4(2)S4`	affected	—
`15.4(3)S4`	affected	—
`15.4(3)S5`	affected	—
`15.4(3)S6`	affected	—
`15.4(3)S7`	affected	—
`15.4(3)S6a`	affected	—
`15.4(3)S8`	affected	—
`15.4(3)S9`	affected	—
`15.4(3)S10`	affected	—
`15.2(2)JAX`	affected	—
`15.3(3)M`	affected	—
`15.3(3)M1`	affected	—
`15.3(3)M2`	affected	—
`15.3(3)M3`	affected	—
`15.3(3)M5`	affected	—
`15.3(3)M4`	affected	—
`15.3(3)M6`	affected	—
`15.3(3)M7`	affected	—
`15.3(3)M8`	affected	—
`15.3(3)M9`	affected	—
`15.3(3)M10`	affected	—
`15.3(3)M8a`	affected	—
`15.2(1)EY`	affected	—
`15.0(2)EJ`	affected	—
`15.0(2)EJ1`	affected	—
`15.2(1)SY`	affected	—
`15.2(1)SY1`	affected	—
`15.2(1)SY0a`	affected	—
`15.2(1)SY2`	affected	—
`15.2(2)SY`	affected	—
`15.2(1)SY1a`	affected	—
`15.2(2)SY1`	affected	—
`15.2(2)SY2`	affected	—
`15.2(1)SY3`	affected	—
`15.2(1)SY4`	affected	—
`15.2(2)SY3`	affected	—
`15.2(1)SY5`	affected	—
`15.2(1)SY6`	affected	—
`15.2(1)SY7`	affected	—
`15.2(1)SY8`	affected	—
`15.2(5)EX`	affected	—
`15.0(2)EK`	affected	—
`15.0(2)EK1`	affected	—
`15.4(1)CG`	affected	—
`15.4(1)CG1`	affected	—
`15.4(2)CG`	affected	—
`15.5(1)S`	affected	—
`15.5(2)S`	affected	—
`15.5(1)S1`	affected	—
`15.5(3)S`	affected	—
`15.5(1)S2`	affected	—
`15.5(1)S3`	affected	—
`15.5(2)S1`	affected	—
`15.5(2)S2`	affected	—
`15.5(3)S1`	affected	—
`15.5(3)S1a`	affected	—
`15.5(2)S3`	affected	—
`15.5(3)S2`	affected	—
`15.5(3)S0a`	affected	—
`15.5(3)S3`	affected	—
`15.5(1)S4`	affected	—
`15.5(2)S4`	affected	—
`15.5(3)S4`	affected	—
`15.5(3)S5`	affected	—
`15.5(3)S6`	affected	—
`15.5(3)S6a`	affected	—
`15.5(3)S7`	affected	—
`15.5(3)S6b`	affected	—
`15.5(3)S8`	affected	—
`15.5(3)S9`	affected	—
`15.5(3)S10`	affected	—
`15.5(3)S9a`	affected	—
`15.5(1)T`	affected	—
`15.5(1)T1`	affected	—
`15.5(2)T`	affected	—
`15.5(1)T2`	affected	—
`15.5(1)T3`	affected	—
`15.5(2)T1`	affected	—
`15.5(2)T2`	affected	—
`15.5(2)T3`	affected	—
`15.5(2)T4`	affected	—
`15.5(1)T4`	affected	—
`15.2(2)EA`	affected	—
`15.2(2)EA1`	affected	—
`15.2(2)EA2`	affected	—
`15.2(3)EA`	affected	—
`15.2(4)EA`	affected	—
`15.2(4)EA1`	affected	—
`15.2(2)EA3`	affected	—
`15.2(4)EA3`	affected	—
`15.2(5)EA`	affected	—
`15.2(4)EA4`	affected	—
`15.2(4)EA5`	affected	—
`15.2(4)EA6`	affected	—
`15.2(4)EA7`	affected	—
`15.2(4)EA8`	affected	—
`15.2(4)EA9`	affected	—
`15.2(4)EA9a`	affected	—
`15.3(3)JN8`	affected	—
`15.5(3)M`	affected	—
`15.5(3)M1`	affected	—
`15.5(3)M0a`	affected	—
`15.5(3)M2`	affected	—
`15.5(3)M3`	affected	—
`15.5(3)M4`	affected	—
`15.5(3)M4a`	affected	—
`15.5(3)M5`	affected	—
`15.5(3)M6`	affected	—
`15.5(3)M7`	affected	—
`15.5(3)M6a`	affected	—
`15.5(3)M8`	affected	—
`15.5(3)M9`	affected	—
`15.5(3)M10`	affected	—
`15.3(3)JA`	affected	—
`15.3(3)JA1m`	affected	—
`15.3(3)JA1`	affected	—
`15.3(3)JA4`	affected	—
`15.3(3)JA5`	affected	—
`15.3(3)JA6`	affected	—
`15.3(3)JA7`	affected	—
`15.3(3)JA8`	affected	—
`15.3(3)JA10`	affected	—
`15.3(3)JAA`	affected	—
`15.3(3)JAB`	affected	—
`15.3(3)JB`	affected	—
`15.5(3)SN`	affected	—
`15.6(1)S`	affected	—
`15.6(2)S`	affected	—
`15.6(2)S1`	affected	—
`15.6(1)S1`	affected	—
`15.6(1)S2`	affected	—
`15.6(2)S2`	affected	—
`15.6(1)S3`	affected	—
`15.6(2)S3`	affected	—
`15.6(1)S4`	affected	—
`15.6(2)S4`	affected	—
`15.6(1)T`	affected	—
`15.6(2)T`	affected	—
`15.6(1)T0a`	affected	—
`15.6(1)T1`	affected	—
`15.6(2)T1`	affected	—
`15.6(1)T2`	affected	—
`15.6(2)T2`	affected	—
`15.6(1)T3`	affected	—
`15.6(2)T3`	affected	—
`15.3(3)JNB3`	affected	—
`15.3(3)JAX`	affected	—
`15.3(3)JAX1`	affected	—
`15.3(3)JAX2`	affected	—
`15.3(3)JBB`	affected	—
`15.3(3)JBB1`	affected	—
`15.3(3)JBB2`	affected	—
`15.3(3)JBB4`	affected	—
`15.3(3)JBB5`	affected	—
`15.3(3)JBB6`	affected	—
`15.3(3)JC`	affected	—
`15.3(3)JC1`	affected	—
`15.3(3)JC2`	affected	—
`15.3(3)JC3`	affected	—
`15.3(3)JC4`	affected	—
`15.3(3)JC5`	affected	—
`15.3(1)SY`	affected	—
`15.3(1)SY1`	affected	—
`15.3(1)SY2`	affected	—
`15.6(2)SP`	affected	—
`15.6(2)SP1`	affected	—
`15.6(2)SP2`	affected	—
`15.6(2)SP3`	affected	—
`15.6(2)SP4`	affected	—
`15.6(2)SP5`	affected	—
`15.6(2)SP6`	affected	—
`15.6(2)SP7`	affected	—
`15.6(2)SP8`	affected	—
`15.6(2)SP9`	affected	—
`15.6(2)SN`	affected	—
`15.3(3)JD`	affected	—
`15.3(3)JD2`	affected	—
`15.6(3)M`	affected	—
`15.6(3)M1`	affected	—
`15.6(3)M0a`	affected	—
`15.6(3)M1b`	affected	—
`15.6(3)M2`	affected	—
`15.6(3)M2a`	affected	—
`15.6(3)M3`	affected	—
`15.6(3)M3a`	affected	—
`15.6(3)M4`	affected	—
`15.6(3)M5`	affected	—
`15.6(3)M6`	affected	—
`15.6(3)M7`	affected	—
`15.6(3)M6a`	affected	—
`15.6(3)M6b`	affected	—
`15.6(3)M8`	affected	—
`15.6(3)M9`	affected	—
`15.2(4)EC1`	affected	—
`15.2(4)EC2`	affected	—
`15.4(1)SY`	affected	—
`15.4(1)SY1`	affected	—
`15.4(1)SY2`	affected	—
`15.4(1)SY3`	affected	—
`15.4(1)SY4`	affected	—
`15.5(1)SY`	affected	—
`15.5(1)SY1`	affected	—
`15.5(1)SY2`	affected	—
`15.5(1)SY3`	affected	—
`15.5(1)SY4`	affected	—
`15.5(1)SY5`	affected	—
`15.5(1)SY6`	affected	—
`15.5(1)SY7`	affected	—
`15.5(1)SY8`	affected	—
`15.5(1)SY9`	affected	—
`15.5(1)SY10`	affected	—
`15.5(1)SY11`	affected	—
`15.5(1)SY12`	affected	—
`15.5(1)SY13`	affected	—
`15.5(1)SY14`	affected	—
`15.5(1)SY15`	affected	—
`15.5(1)SY16`	affected	—
`15.7(3)M`	affected	—
`15.7(3)M1`	affected	—
`15.7(3)M0a`	affected	—
`15.7(3)M3`	affected	—
`15.7(3)M2`	affected	—
`15.7(3)M4`	affected	—
`15.7(3)M5`	affected	—
`15.7(3)M4a`	affected	—
`15.7(3)M4b`	affected	—
`15.7(3)M6`	affected	—
`15.7(3)M7`	affected	—
`15.7(3)M8`	affected	—
`15.7(3)M9`	affected	—
`15.8(3)M`	affected	—
`15.8(3)M1`	affected	—
`15.8(3)M0a`	affected	—
`15.8(3)M0b`	affected	—
`15.8(3)M2`	affected	—
`15.8(3)M1a`	affected	—
`15.8(3)M3`	affected	—
`15.8(3)M2a`	affected	—
`15.8(3)M4`	affected	—
`15.8(3)M3a`	affected	—
`15.8(3)M3b`	affected	—
`15.8(3)M5`	affected	—
`15.8(3)M6`	affected	—
`15.8(3)M7`	affected	—
`15.8(3)M8`	affected	—
`15.8(3)M9`	affected	—
`15.9(3)M`	affected	—
`15.9(3)M1`	affected	—
`15.9(3)M0a`	affected	—
`15.9(3)M2`	affected	—
`15.9(3)M3`	affected	—
`15.9(3)M2a`	affected	—
`15.9(3)M3a`	affected	—
`15.9(3)M4`	affected	—
`15.9(3)M3b`	affected	—
`15.9(3)M5`	affected	—
`15.9(3)M4a`	affected	—
`15.9(3)M6`	affected	—
`15.9(3)M7`	affected	—
`15.9(3)M6a`	affected	—
`15.9(3)M6b`	affected	—
`15.9(3)M8`	affected	—
`15.9(3)M7a`	affected	—
`15.9(3)M9`	affected	—
`15.9(3)M8b`	affected	—
`15.9(3)M10`	affected	—
`15.9(3)M11`	affected	—
`15.9(3)M12`	affected	—

Cisco

Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

affected

Version	Status	Constraints
`9.8.1`	affected	—
`9.8.1.5`	affected	—
`9.8.1.7`	affected	—
`9.8.2`	affected	—
`9.8.2.8`	affected	—
`9.8.2.14`	affected	—
`9.8.2.15`	affected	—
`9.8.2.17`	affected	—
`9.8.2.20`	affected	—
`9.8.2.24`	affected	—
`9.8.2.26`	affected	—
`9.8.2.28`	affected	—
`9.8.2.33`	affected	—
`9.8.2.35`	affected	—
`9.8.2.38`	affected	—
`9.8.3.8`	affected	—
`9.8.3.11`	affected	—
`9.8.3.14`	affected	—
`9.8.3.16`	affected	—
`9.8.3.18`	affected	—
`9.8.3.21`	affected	—
`9.8.3`	affected	—
`9.8.3.26`	affected	—
`9.8.3.29`	affected	—
`9.8.4`	affected	—
`9.8.4.3`	affected	—
`9.8.4.7`	affected	—
`9.8.4.8`	affected	—
`9.8.4.10`	affected	—
`9.8.4.12`	affected	—
`9.8.4.15`	affected	—
`9.8.4.17`	affected	—
`9.8.2.45`	affected	—
`9.8.4.25`	affected	—
`9.8.4.20`	affected	—
`9.8.4.22`	affected	—
`9.8.4.26`	affected	—
`9.8.4.29`	affected	—
`9.8.4.32`	affected	—
`9.8.4.33`	affected	—
`9.8.4.34`	affected	—
`9.8.4.35`	affected	—
`9.8.4.39`	affected	—
`9.8.4.40`	affected	—
`9.8.4.41`	affected	—
`9.8.4.43`	affected	—
`9.8.4.44`	affected	—
`9.8.4.45`	affected	—
`9.8.4.46`	affected	—
`9.8.4.48`	affected	—
`9.12.1`	affected	—
`9.12.1.2`	affected	—
`9.12.1.3`	affected	—
`9.12.2`	affected	—
`9.12.2.4`	affected	—
`9.12.2.5`	affected	—
`9.12.2.9`	affected	—
`9.12.3`	affected	—
`9.12.3.2`	affected	—
`9.12.3.7`	affected	—
`9.12.4`	affected	—
`9.12.3.12`	affected	—
`9.12.3.9`	affected	—
`9.12.2.1`	affected	—
`9.12.4.2`	affected	—
`9.12.4.4`	affected	—
`9.12.4.7`	affected	—
`9.12.4.10`	affected	—
`9.12.4.13`	affected	—
`9.12.4.8`	affected	—
`9.12.4.18`	affected	—
`9.12.4.24`	affected	—
`9.12.4.26`	affected	—
`9.12.4.29`	affected	—
`9.12.4.30`	affected	—
`9.12.4.35`	affected	—
`9.12.4.37`	affected	—
`9.12.4.38`	affected	—
`9.12.4.39`	affected	—
`9.12.4.40`	affected	—
`9.12.4.41`	affected	—
`9.12.4.47`	affected	—
`9.12.4.48`	affected	—
`9.12.4.50`	affected	—
`9.12.4.52`	affected	—
`9.12.4.54`	affected	—
`9.12.4.55`	affected	—
`9.12.4.56`	affected	—
`9.12.4.58`	affected	—
`9.12.4.62`	affected	—
`9.12.4.65`	affected	—
`9.12.4.67`	affected	—
`9.14.1`	affected	—
`9.14.1.10`	affected	—
`9.14.1.6`	affected	—
`9.14.1.15`	affected	—
`9.14.1.19`	affected	—
`9.14.1.30`	affected	—
`9.14.2`	affected	—
`9.14.2.4`	affected	—
`9.14.2.8`	affected	—
`9.14.2.13`	affected	—
`9.14.2.15`	affected	—
`9.14.3`	affected	—
`9.14.3.1`	affected	—
`9.14.3.9`	affected	—
`9.14.3.11`	affected	—
`9.14.3.13`	affected	—
`9.14.3.18`	affected	—
`9.14.3.15`	affected	—
`9.14.4`	affected	—
`9.14.4.6`	affected	—
`9.14.4.7`	affected	—
`9.14.4.12`	affected	—
`9.14.4.13`	affected	—
`9.14.4.14`	affected	—
`9.14.4.15`	affected	—
`9.14.4.17`	affected	—
`9.14.4.22`	affected	—
`9.14.4.23`	affected	—
`9.14.4.24`	affected	—
`9.16.1`	affected	—
`9.16.1.28`	affected	—
`9.16.2`	affected	—
`9.16.2.3`	affected	—
`9.16.2.7`	affected	—
`9.16.2.11`	affected	—
`9.16.2.13`	affected	—
`9.16.2.14`	affected	—
`9.16.3`	affected	—
`9.16.3.3`	affected	—
`9.16.3.14`	affected	—
`9.16.3.15`	affected	—
`9.16.3.19`	affected	—
`9.16.3.23`	affected	—
`9.16.4`	affected	—
`9.16.4.9`	affected	—
`9.16.4.14`	affected	—
`9.16.4.19`	affected	—
`9.16.4.27`	affected	—
`9.16.4.38`	affected	—
`9.16.4.39`	affected	—
`9.16.4.42`	affected	—
`9.16.4.48`	affected	—
`9.16.4.55`	affected	—
`9.16.4.57`	affected	—
`9.16.4.61`	affected	—
`9.16.4.62`	affected	—
`9.16.4.67`	affected	—
`9.16.4.70`	affected	—
`9.16.4.71`	affected	—
`9.16.4.76`	affected	—
`9.16.4.82`	affected	—
`9.16.4.84`	affected	—
`9.17.1`	affected	—
`9.17.1.7`	affected	—
`9.17.1.9`	affected	—
`9.17.1.10`	affected	—
`9.17.1.11`	affected	—
`9.17.1.13`	affected	—
`9.17.1.15`	affected	—
`9.17.1.20`	affected	—
`9.17.1.30`	affected	—
`9.17.1.33`	affected	—
`9.17.1.39`	affected	—
`9.17.1.45`	affected	—
`9.17.1.46`	affected	—
`9.18.1`	affected	—
`9.18.1.3`	affected	—
`9.18.2`	affected	—
`9.18.2.5`	affected	—
`9.18.2.7`	affected	—
`9.18.2.8`	affected	—
`9.18.3`	affected	—
`9.18.3.39`	affected	—
`9.18.3.46`	affected	—
`9.18.3.53`	affected	—
`9.18.3.55`	affected	—
`9.18.3.56`	affected	—
`9.18.4`	affected	—
`9.18.4.5`	affected	—
`9.18.4.8`	affected	—
`9.18.4.22`	affected	—
`9.18.4.24`	affected	—
`9.18.4.29`	affected	—
`9.18.4.34`	affected	—
`9.18.4.40`	affected	—
`9.18.4.47`	affected	—
`9.18.4.50`	affected	—
`9.18.4.52`	affected	—
`9.18.4.53`	affected	—
`9.18.4.57`	affected	—
`9.18.4.66`	affected	—
`9.18.4.67`	affected	—
`9.18.4.68`	affected	—
`9.19.1`	affected	—
`9.19.1.5`	affected	—
`9.19.1.9`	affected	—
`9.19.1.12`	affected	—
`9.19.1.18`	affected	—
`9.19.1.22`	affected	—
`9.19.1.24`	affected	—
`9.19.1.27`	affected	—
`9.19.1.28`	affected	—
`9.19.1.31`	affected	—
`9.19.1.37`	affected	—
`9.19.1.38`	affected	—
`9.19.1.42`	affected	—
`9.20.1`	affected	—
`9.20.1.5`	affected	—
`9.20.2`	affected	—
`9.20.2.10`	affected	—
`9.20.2.21`	affected	—
`9.20.2.22`	affected	—
`9.20.3`	affected	—
`9.20.3.4`	affected	—
`9.20.3.7`	affected	—
`9.20.3.9`	affected	—
`9.20.3.10`	affected	—
`9.20.3.13`	affected	—
`9.20.3.16`	affected	—
`9.20.3.20`	affected	—
`9.20.4`	affected	—
`9.20.4.7`	affected	—
`9.22.1.1`	affected	—
`9.22.1.3`	affected	—
`9.22.1.2`	affected	—
`9.22.1.6`	affected	—
`9.22.2`	affected	—
`9.22.2.4`	affected	—
`9.22.2.9`	affected	—
`9.23.1`	affected	—
`9.23.1.3`	affected	—
`9.23.1.7`	affected	—
`9.23.1.13`	affected	—

Cisco

Cisco IOS XE Software

affected

Version	Status	Constraints
`3.5.0E`	affected	—
`3.5.1E`	affected	—
`3.5.2E`	affected	—
`3.5.3E`	affected	—
`3.11.1S`	affected	—
`3.11.2S`	affected	—
`3.11.0S`	affected	—
`3.11.3S`	affected	—
`3.11.4S`	affected	—
`3.12.0S`	affected	—
`3.12.1S`	affected	—
`3.12.2S`	affected	—
`3.12.3S`	affected	—
`3.12.0aS`	affected	—
`3.12.4S`	affected	—
`3.13.0S`	affected	—
`3.13.1S`	affected	—
`3.13.2S`	affected	—
`3.13.3S`	affected	—
`3.13.4S`	affected	—
`3.13.5S`	affected	—
`3.13.2aS`	affected	—
`3.13.0aS`	affected	—
`3.13.5aS`	affected	—
`3.13.6S`	affected	—
`3.13.7S`	affected	—
`3.13.6aS`	affected	—
`3.13.7aS`	affected	—
`3.13.8S`	affected	—
`3.13.9S`	affected	—
`3.13.10S`	affected	—
`3.6.0E`	affected	—
`3.6.1E`	affected	—
`3.6.2aE`	affected	—
`3.6.2E`	affected	—
`3.6.3E`	affected	—
`3.6.4E`	affected	—
`3.6.5E`	affected	—
`3.6.6E`	affected	—
`3.6.5aE`	affected	—
`3.6.7E`	affected	—
`3.6.8E`	affected	—
`3.6.7bE`	affected	—
`3.6.9E`	affected	—
`3.6.10E`	affected	—
`3.14.0S`	affected	—
`3.14.1S`	affected	—
`3.14.2S`	affected	—
`3.14.3S`	affected	—
`3.14.4S`	affected	—
`3.15.0S`	affected	—
`3.15.1S`	affected	—
`3.15.2S`	affected	—
`3.15.1cS`	affected	—
`3.15.3S`	affected	—
`3.15.4S`	affected	—
`3.7.0E`	affected	—
`3.7.1E`	affected	—
`3.7.2E`	affected	—
`3.7.3E`	affected	—
`3.7.4E`	affected	—
`3.7.5E`	affected	—
`3.16.0S`	affected	—
`3.16.1S`	affected	—
`3.16.1aS`	affected	—
`3.16.2S`	affected	—
`3.16.2aS`	affected	—
`3.16.0cS`	affected	—
`3.16.3S`	affected	—
`3.16.2bS`	affected	—
`3.16.3aS`	affected	—
`3.16.4S`	affected	—
`3.16.4aS`	affected	—
`3.16.4bS`	affected	—
`3.16.5S`	affected	—
`3.16.4dS`	affected	—
`3.16.6S`	affected	—
`3.16.7S`	affected	—
`3.16.6bS`	affected	—
`3.16.7aS`	affected	—
`3.16.7bS`	affected	—
`3.16.8S`	affected	—
`3.16.9S`	affected	—
`3.16.10S`	affected	—
`3.17.0S`	affected	—
`3.17.1S`	affected	—
`3.17.2S`	affected	—
`3.17.1aS`	affected	—
`3.17.3S`	affected	—
`3.17.4S`	affected	—
`3.8.0E`	affected	—
`3.8.1E`	affected	—
`3.8.2E`	affected	—
`3.8.3E`	affected	—
`3.8.4E`	affected	—
`3.8.5E`	affected	—
`3.8.5aE`	affected	—
`3.8.6E`	affected	—
`3.8.7E`	affected	—
`3.8.8E`	affected	—
`3.8.9E`	affected	—
`3.8.10E`	affected	—
`3.18.0aS`	affected	—
`3.18.0S`	affected	—
`3.18.1S`	affected	—
`3.18.2S`	affected	—
`3.18.3S`	affected	—
`3.18.4S`	affected	—
`3.18.0SP`	affected	—
`3.18.1SP`	affected	—
`3.18.1aSP`	affected	—
`3.18.1bSP`	affected	—
`3.18.1cSP`	affected	—
`3.18.2SP`	affected	—
`3.18.2aSP`	affected	—
`3.18.3SP`	affected	—
`3.18.4SP`	affected	—
`3.18.3aSP`	affected	—
`3.18.3bSP`	affected	—
`3.18.5SP`	affected	—
`3.18.6SP`	affected	—
`3.18.7SP`	affected	—
`3.18.8aSP`	affected	—
`3.18.9SP`	affected	—
`3.9.0E`	affected	—
`3.9.1E`	affected	—
`3.9.2E`	affected	—
`16.6.1`	affected	—
`16.6.2`	affected	—
`16.6.3`	affected	—
`16.6.4`	affected	—
`16.6.5`	affected	—
`16.6.4a`	affected	—
`16.6.5a`	affected	—
`16.6.6`	affected	—
`16.6.7`	affected	—
`16.6.8`	affected	—
`16.6.9`	affected	—
`16.6.10`	affected	—
`16.7.1`	affected	—
`16.7.1a`	affected	—
`16.7.1b`	affected	—
`16.7.2`	affected	—
`16.7.3`	affected	—
`16.7.4`	affected	—
`16.8.1`	affected	—
`16.8.1a`	affected	—
`16.8.1b`	affected	—
`16.8.1s`	affected	—
`16.8.1c`	affected	—
`16.8.1d`	affected	—
`16.8.2`	affected	—
`16.8.1e`	affected	—
`16.8.3`	affected	—
`16.9.1`	affected	—
`16.9.2`	affected	—
`16.9.1a`	affected	—
`16.9.1b`	affected	—
`16.9.1s`	affected	—
`16.9.3`	affected	—
`16.9.4`	affected	—
`16.9.3a`	affected	—
`16.9.5`	affected	—
`16.9.5f`	affected	—
`16.9.6`	affected	—
`16.9.7`	affected	—
`16.9.8`	affected	—
`16.10.1`	affected	—
`16.10.1a`	affected	—
`16.10.1b`	affected	—
`16.10.1s`	affected	—
`16.10.1c`	affected	—
`16.10.1e`	affected	—
`16.10.1d`	affected	—
`16.10.2`	affected	—
`16.10.1f`	affected	—
`16.10.1g`	affected	—
`16.10.3`	affected	—
`3.10.0E`	affected	—
`3.10.1E`	affected	—
`3.10.0cE`	affected	—
`3.10.2E`	affected	—
`3.10.3E`	affected	—
`16.11.1`	affected	—
`16.11.1a`	affected	—
`16.11.1b`	affected	—
`16.11.2`	affected	—
`16.11.1s`	affected	—
`16.12.1`	affected	—
`16.12.1s`	affected	—
`16.12.1a`	affected	—
`16.12.1c`	affected	—
`16.12.1w`	affected	—
`16.12.2`	affected	—
`16.12.1y`	affected	—
`16.12.2a`	affected	—
`16.12.3`	affected	—
`16.12.8`	affected	—
`16.12.2s`	affected	—
`16.12.1x`	affected	—
`16.12.1t`	affected	—
`16.12.4`	affected	—
`16.12.3s`	affected	—
`16.12.3a`	affected	—
`16.12.4a`	affected	—
`16.12.5`	affected	—
`16.12.6`	affected	—
`16.12.1z1`	affected	—
`16.12.5a`	affected	—
`16.12.5b`	affected	—
`16.12.1z2`	affected	—
`16.12.6a`	affected	—
`16.12.7`	affected	—
`16.12.9`	affected	—
`16.12.10`	affected	—
`16.12.10a`	affected	—
`16.12.11`	affected	—
`16.12.12`	affected	—
`16.12.13`	affected	—
`16.12.14`	affected	—
`3.11.0E`	affected	—
`3.11.1E`	affected	—
`3.11.2E`	affected	—
`3.11.3E`	affected	—
`3.11.1aE`	affected	—
`3.11.4E`	affected	—
`3.11.3aE`	affected	—
`3.11.5E`	affected	—
`3.11.6E`	affected	—
`3.11.7E`	affected	—
`3.11.8E`	affected	—
`3.11.9E`	affected	—
`3.11.10E`	affected	—
`3.11.11E`	affected	—
`3.11.12E`	affected	—
`3.11.13E`	affected	—
`17.1.1`	affected	—
`17.1.1a`	affected	—
`17.1.1s`	affected	—
`17.1.1t`	affected	—
`17.1.3`	affected	—
`17.2.1`	affected	—
`17.2.1r`	affected	—
`17.2.1a`	affected	—
`17.2.1v`	affected	—
`17.2.2`	affected	—
`17.2.3`	affected	—
`17.3.1`	affected	—
`17.3.2`	affected	—
`17.3.3`	affected	—
`17.3.1a`	affected	—
`17.3.1w`	affected	—
`17.3.2a`	affected	—
`17.3.1x`	affected	—
`17.3.1z`	affected	—
`17.3.4`	affected	—
`17.3.5`	affected	—
`17.3.4a`	affected	—
`17.3.6`	affected	—
`17.3.4b`	affected	—
`17.3.4c`	affected	—
`17.3.5a`	affected	—
`17.3.5b`	affected	—
`17.3.7`	affected	—
`17.3.8`	affected	—
`17.3.8a`	affected	—
`17.4.1`	affected	—
`17.4.2`	affected	—
`17.4.1a`	affected	—
`17.4.1b`	affected	—
`17.4.2a`	affected	—
`17.5.1`	affected	—
`17.5.1a`	affected	—
`17.6.1`	affected	—
`17.6.2`	affected	—
`17.6.1w`	affected	—
`17.6.1a`	affected	—
`17.6.1x`	affected	—
`17.6.3`	affected	—
`17.6.1y`	affected	—
`17.6.1z`	affected	—
`17.6.3a`	affected	—
`17.6.4`	affected	—
`17.6.1z1`	affected	—
`17.6.5`	affected	—
`17.6.6`	affected	—
`17.6.6a`	affected	—
`17.6.5a`	affected	—
`17.6.7`	affected	—
`17.6.8`	affected	—
`17.6.8a`	affected	—
`17.7.1`	affected	—
`17.7.1a`	affected	—
`17.7.1b`	affected	—
`17.7.2`	affected	—
`17.10.1`	affected	—
`17.10.1a`	affected	—
`17.10.1b`	affected	—
`17.8.1`	affected	—
`17.8.1a`	affected	—
`17.9.1`	affected	—
`17.9.1w`	affected	—
`17.9.2`	affected	—
`17.9.1a`	affected	—
`17.9.1x`	affected	—
`17.9.1y`	affected	—
`17.9.3`	affected	—
`17.9.2a`	affected	—
`17.9.1x1`	affected	—
`17.9.3a`	affected	—
`17.9.4`	affected	—
`17.9.1y1`	affected	—
`17.9.5`	affected	—
`17.9.4a`	affected	—
`17.9.5a`	affected	—
`17.9.5b`	affected	—
`17.9.6`	affected	—
`17.9.6a`	affected	—
`17.9.7`	affected	—
`17.9.5e`	affected	—
`17.9.5f`	affected	—
`17.9.8`	affected	—
`17.9.7a`	affected	—
`17.9.7b`	affected	—
`17.11.1`	affected	—
`17.11.1a`	affected	—
`17.12.1`	affected	—
`17.12.1w`	affected	—
`17.12.1a`	affected	—
`17.12.1x`	affected	—
`17.12.2`	affected	—
`17.12.3`	affected	—
`17.12.2a`	affected	—
`17.12.1y`	affected	—
`17.12.1z`	affected	—
`17.12.4`	affected	—
`17.12.3a`	affected	—
`17.12.1z1`	affected	—
`17.12.1z2`	affected	—
`17.12.4a`	affected	—
`17.12.5`	affected	—
`17.12.4b`	affected	—
`17.12.1z3`	affected	—
`17.12.5a`	affected	—
`17.12.1z4`	affected	—
`17.12.6`	affected	—
`17.12.5b`	affected	—
`17.12.5c`	affected	—
`17.12.6a`	affected	—
`17.12.5d`	affected	—
`17.12.6b`	affected	—
`17.13.1`	affected	—
`17.13.1a`	affected	—
`17.14.1`	affected	—
`17.14.1a`	affected	—
`17.15.1`	affected	—
`17.15.1w`	affected	—
`17.15.1a`	affected	—
`17.15.2`	affected	—
`17.15.1b`	affected	—
`17.15.1x`	affected	—
`17.15.1z`	affected	—
`17.15.3`	affected	—
`17.15.2c`	affected	—
`17.15.2a`	affected	—
`17.15.1y`	affected	—
`17.15.2b`	affected	—
`17.15.3a`	affected	—
`17.15.4`	affected	—
`17.15.3b`	affected	—
`17.15.4d`	affected	—
`17.15.4e`	affected	—
`17.16.1`	affected	—
`17.16.1a`	affected	—
`17.17.1`	affected	—
`17.18.1`	affected	—
`17.18.1w`	affected	—
`17.18.1a`	affected	—

Cisco

Cisco Secure Firewall Threat Defense (FTD) Software

affected

Version	Status	Constraints
`6.2.3`	affected	—
`6.2.3.1`	affected	—
`6.2.3.2`	affected	—
`6.2.3.3`	affected	—
`6.2.3.4`	affected	—
`6.2.3.5`	affected	—
`6.2.3.6`	affected	—
`6.2.3.7`	affected	—
`6.2.3.8`	affected	—
`6.2.3.10`	affected	—
`6.2.3.11`	affected	—
`6.2.3.9`	affected	—
`6.2.3.12`	affected	—
`6.2.3.13`	affected	—
`6.2.3.14`	affected	—
`6.2.3.15`	affected	—
`6.2.3.16`	affected	—
`6.2.3.17`	affected	—
`6.2.3.18`	affected	—
`6.6.0`	affected	—
`6.6.0.1`	affected	—
`6.6.1`	affected	—
`6.6.3`	affected	—
`6.6.4`	affected	—
`6.6.5`	affected	—
`6.6.5.1`	affected	—
`6.6.5.2`	affected	—
`6.6.7`	affected	—
`6.6.7.1`	affected	—
`6.6.7.2`	affected	—
`6.4.0`	affected	—
`6.4.0.1`	affected	—
`6.4.0.3`	affected	—
`6.4.0.2`	affected	—
`6.4.0.4`	affected	—
`6.4.0.5`	affected	—
`6.4.0.6`	affected	—
`6.4.0.7`	affected	—
`6.4.0.8`	affected	—
`6.4.0.9`	affected	—
`6.4.0.10`	affected	—
`6.4.0.11`	affected	—
`6.4.0.12`	affected	—
`6.4.0.13`	affected	—
`6.4.0.14`	affected	—
`6.4.0.15`	affected	—
`6.4.0.16`	affected	—
`6.4.0.17`	affected	—
`6.4.0.18`	affected	—
`7.0.0`	affected	—
`7.0.0.1`	affected	—
`7.0.1`	affected	—
`7.0.1.1`	affected	—
`7.0.2`	affected	—
`7.0.2.1`	affected	—
`7.0.3`	affected	—
`7.0.4`	affected	—
`7.0.5`	affected	—
`7.0.6`	affected	—
`7.0.6.1`	affected	—
`7.0.6.2`	affected	—
`7.0.6.3`	affected	—
`7.0.7`	affected	—
`7.0.8`	affected	—
`7.0.8.1`	affected	—
`7.1.0`	affected	—
`7.1.0.1`	affected	—
`7.1.0.2`	affected	—
`7.1.0.3`	affected	—
`7.2.0`	affected	—
`7.2.0.1`	affected	—
`7.2.1`	affected	—
`7.2.2`	affected	—
`7.2.3`	affected	—
`7.2.4`	affected	—
`7.2.4.1`	affected	—
`7.2.5`	affected	—
`7.2.5.1`	affected	—
`7.2.6`	affected	—
`7.2.7`	affected	—
`7.2.5.2`	affected	—
`7.2.8`	affected	—
`7.2.8.1`	affected	—
`7.2.9`	affected	—
`7.2.10`	affected	—
`7.2.10.2`	affected	—
`7.3.0`	affected	—
`7.3.1`	affected	—
`7.3.1.1`	affected	—
`7.3.1.2`	affected	—
`7.4.0`	affected	—
`7.4.1`	affected	—
`7.4.1.1`	affected	—
`7.4.2`	affected	—
`7.4.2.1`	affected	—
`7.4.2.2`	affected	—
`7.4.2.3`	affected	—
`7.4.2.4`	affected	—
`7.6.0`	affected	—
`7.6.1`	affected	—
`7.6.2`	affected	—
`7.6.2.1`	affected	—
`7.7.0`	affected	—
`7.7.10`	affected	—
`7.7.10.1`	affected	—

No data.

Vendor Product Confidence Versions

Cisco

Cisco:adaptive Security Appliance Software

81%

Version	Status	Scheme	Platform
`9.8.1`	affected	generic	—
`9.8.1.5`	affected	generic	—
`9.8.1.7`	affected	generic	—
`9.8.2`	affected	generic	—
`9.8.2.8`	affected	generic	—
`9.8.2.14`	affected	generic	—
`9.8.2.15`	affected	generic	—
`9.8.2.17`	affected	generic	—
`9.8.2.20`	affected	generic	—
`9.8.2.24`	affected	generic	—
`9.8.2.26`	affected	generic	—
`9.8.2.28`	affected	generic	—
`9.8.2.33`	affected	generic	—
`9.8.2.35`	affected	generic	—
`9.8.2.38`	affected	generic	—

Cisco

Ios

100%

Version	Status	Scheme	Platform
`15.2(1)S`	affected	generic	—
`15.2(2)S`	affected	generic	—
`15.2(1)S1`	affected	generic	—
`15.2(4)S`	affected	generic	—
`15.2(1)S2`	affected	generic	—
`15.2(2)S1`	affected	generic	—
`15.2(2)S2`	affected	generic	—
`15.2(2)S0a`	affected	generic	—
`15.2(2)S0c`	affected	generic	—
`15.2(4)S1`	affected	generic	—
`15.2(4)S4`	affected	generic	—
`15.2(4)S6`	affected	generic	—
`15.2(4)S2`	affected	generic	—
`15.2(4)S5`	affected	generic	—
`15.2(4)S3`	affected	generic	—
`15.2(4)S3a`	affected	generic	—
`15.2(4)S4a`	affected	generic	—
`15.2(4)S7`	affected	generic	—
`15.3(1)T`	affected	generic	—
`15.3(2)T`	affected	generic	—
`15.3(1)T1`	affected	generic	—
`15.3(1)T2`	affected	generic	—
`15.3(1)T3`	affected	generic	—
`15.3(1)T4`	affected	generic	—
`15.3(2)T1`	affected	generic	—
`15.3(2)T2`	affected	generic	—
`15.3(2)T3`	affected	generic	—
`15.3(2)T4`	affected	generic	—
`15.0(2)EY`	affected	generic	—
`15.0(2)EY1`	affected	generic	—
`15.0(2)EY2`	affected	generic	—
`15.0(2)EY3`	affected	generic	—
`15.1(2)S`	affected	generic	—
`15.1(1)S`	affected	generic	—
`15.1(1)S1`	affected	generic	—
`15.1(3)S`	affected	generic	—
`15.1(1)S2`	affected	generic	—
`15.1(2)S1`	affected	generic	—
`15.1(2)S2`	affected	generic	—
`15.1(3)S1`	affected	generic	—
`15.1(3)S0a`	affected	generic	—
`15.1(3)S2`	affected	generic	—
`15.1(3)S4`	affected	generic	—
`15.1(3)S3`	affected	generic	—
`15.1(3)S5`	affected	generic	—
`15.1(3)S6`	affected	generic	—
`15.1(3)S5a`	affected	generic	—
`15.1(4)M3`	affected	generic	—
`15.1(4)M`	affected	generic	—
`15.1(4)M1`	affected	generic	—
`15.1(4)M2`	affected	generic	—
`15.1(4)M6`	affected	generic	—
`15.1(4)M5`	affected	generic	—
`15.1(4)M4`	affected	generic	—
`15.1(4)M7`	affected	generic	—
`15.1(4)M3a`	affected	generic	—
`15.1(4)M10`	affected	generic	—
`15.1(4)M8`	affected	generic	—
`15.1(4)M9`	affected	generic	—
`15.0(2)SE`	affected	generic	—
`15.0(2)SE1`	affected	generic	—
`15.0(2)SE2`	affected	generic	—
`15.0(2)SE3`	affected	generic	—
`15.0(2)SE4`	affected	generic	—
`15.0(2)SE5`	affected	generic	—
`15.0(2)SE6`	affected	generic	—
`15.0(2)SE7`	affected	generic	—
`15.0(2)SE8`	affected	generic	—
`15.0(2)SE9`	affected	generic	—
`15.0(2)SE10`	affected	generic	—
`15.0(2)SE11`	affected	generic	—
`15.0(2)SE10a`	affected	generic	—
`15.0(2)SE12`	affected	generic	—
`15.0(2)SE13`	affected	generic	—
`15.0(2)SE14`	affected	generic	—
`15.0(2)SE15`	affected	generic	—
`15.0(2)SE16`	affected	generic	—
`15.0(2)SE17`	affected	generic	—
`15.0(2)SE18`	affected	generic	—
`15.0(2)SE19`	affected	generic	—
`15.0(2)SE20`	affected	generic	—

Cisco

Ios Xe Software

88%

Version	Status	Scheme	Platform
`3.5.0E`	affected	generic	—
`3.5.1E`	affected	generic	—
`3.5.2E`	affected	generic	—
`3.5.3E`	affected	generic	—
`3.11.1S`	affected	generic	—
`3.11.2S`	affected	generic	—
`3.11.0S`	affected	generic	—
`3.11.3S`	affected	generic	—
`3.11.4S`	affected	generic	—
`3.11.5E`	affected	generic	—
`3.11.6E`	affected	generic	—
`3.11.7E`	affected	generic	—

Cisco

Secure Firewall Threat Defense

100%

Version	Status	Scheme	Platform
`6.2.3`	affected	generic	—
`6.2.3.1`	affected	generic	—
`6.2.3.2`	affected	generic	—
`6.2.3.3`	affected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00142.

Exploitation none

Automatable yes

Technical Impact partial

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK

History

Mon, 30 Mar 2026 08:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco cisco:adaptive Security Appliance Software Cisco ios Cisco ios Xe Software Cisco secure Firewall Threat Defense
Vendors & Products		Cisco Cisco cisco:adaptive Security Appliance Software Cisco ios Cisco ios Xe Software Cisco secure Firewall Threat Defense

Thu, 26 Mar 2026 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 25 Mar 2026 22:00:00 +0000

Type	Values Removed	Values Added
Title		Improper IKEv2 Packet Parsing Leading to Denial of Service

Wed, 25 Mar 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software, Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS Software and IOS XE Software could allow the attacker to cause the affected device to reload, resulting in a DoS condition. A successful exploit of Cisco Secure Firewall ASA Software and Secure FTD Software could allow the attacker to partially exhaust system memory, resulting in system instability, such as the inability to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Weaknesses		CWE-401
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK
Metrics		cvssV3_1 `{'score': 8.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H'}`

Subscriptions

Cisco Cisco:adaptive Security Appliance Software Ios Ios Xe Software Secure Firewall Threat Defense

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2026-03-25T16:03:12.439Z

Updated: 2026-03-26T17:37:50.517Z

Reserved: 2025-10-08T11:59:15.350Z

Link: CVE-2026-20012

Vulnrichment

Updated: 2026-03-26T17:37:44.994Z

NVD

Status : Awaiting Analysis

Published: 2026-03-25T16:16:10.957

Modified: 2026-03-26T15:13:33.940

Link: CVE-2026-20012

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-03-30T08:00:21Z

Weaknesses

CWE-401

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object