Product:
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Summary
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.8 | CVE-2026-20013 |
Exploitation
To exploit this vulnerability, an attacker needs to send specially crafted IKEv2 packets to the affected device. If successful, this could lead to resource exhaustion, resulting in a denial of service condition that may require the device to be manually reloaded to restore functionality.
Affected Products
- Cisco Secure Firewall ASA Software: Affected by IKEv2 vulnerability leading to potential DoS conditions.
- Cisco Secure FTD Software: Vulnerable to crafted IKEv2 packets causing resource exhaustion.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches from Cisco and monitor network traffic for unusual IKEv2 packet patterns. Regular updates and security best practices should be followed to minimize exposure to such vulnerabilities.