Secure Firewall ASA and FTD
CVE-2025-20252: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Sec…
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 5.8
EPSS0.43%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.8 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.12 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.14 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.16 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.17 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.18 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.19 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.20 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.22 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.22 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.22 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.22 | See the advisory |
| Cisco Adaptive Security Appliance (ASA) Software 9.23 | See the advisory |
| Cisco Firepower Threat Defense Software 6.2 | See the advisory |
| Cisco Firepower Threat Defense Software 6.2 | See the advisory |
| Cisco Firepower Threat Defense Software 6.2 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.6 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 6.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.0 | See the advisory |
| Cisco Firepower Threat Defense Software 7.1 | See the advisory |
| Cisco Firepower Threat Defense Software 7.1 | See the advisory |
| Cisco Firepower Threat Defense Software 7.1 | See the advisory |
| Cisco Firepower Threat Defense Software 7.1 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.2 | See the advisory |
| Cisco Firepower Threat Defense Software 7.3 | See the advisory |
| Cisco Firepower Threat Defense Software 7.3 | See the advisory |
| Cisco Firepower Threat Defense Software 7.3 | See the advisory |
| Cisco Firepower Threat Defense Software 7.3 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.4 | See the advisory |
| Cisco Firepower Threat Defense Software 7.6 | See the advisory |
| Cisco Firepower Threat Defense Software 7.7 | See the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to partially exhaust system memory, causing system instability like being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.
Exploitation
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 11 Oct 2026.