Product:
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software
Summary
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may impact the availability of services to devices elsewhere in the network. This vulnerability is due to a memory leak when parsing IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.8 | CVE-2026-20015 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted IKEv2 packets to the affected device. If successful, the attacker can exhaust the device’s resources, leading to a denial of service condition that necessitates a manual reload of the device to restore functionality.
Affected Products
- Cisco Secure Firewall ASA Software: Affected by the IKEv2 vulnerability that can lead to DoS conditions.
- Cisco Secure FTD Software: Also vulnerable to the same IKEv2 related DoS issue.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Cisco for the affected products. Additionally, monitoring network traffic for unusual IKEv2 packet patterns may help in identifying potential exploitation attempts.