Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
En bref
- Source
- NVD
- EPSS
- EPSS 0.30 % · centile 23 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- cisco
- Statut NVD
- Analyzed
Rechercher sur…
Description
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network. This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload.
Faiblesses (CWE)
- CWE-401 — Mémoire non libérée après sa durée de vie utile
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.7 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H | cisco |
| CVSS 3.1 | HIGH 7.7 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H | NVD · psirt@cisco.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-9431
- GCVE · GCVE-0-2026-20014
Avis du CERT-FR
- CERTFR-2026-AVI-0242 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*≥ 9.12.1 < 9.16.4.85cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*≥ 9.17.1 < 9.18.4.66cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*≥ 9.19.1 < 9.20.4cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*≥ 9.22.1.1 < 9.22.2.9cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*≥ 9.23.1 < 9.23.1.13cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*≥ 6.4.0 < 7.0.9cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*≥ 7.1.0 < 7.2.11cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*≥ 7.3.0 < 7.4.3cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*≥ 7.6.0 < 7.6.4cpe:2.3:a:cisco:secure_firewall_threat_defense:*:*:*:*:*:*:*:*≥ 7.7.0 < 7.7.11
Produits affectés
| Produit | Versions |
|---|---|
| Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | affected 9.18.1 ; affected 9.18.1.3 ; affected 9.18.2 ; affected 9.18.2.5 ; affected 9.18.2.7 ; affected 9.18.2.8 |
| Cisco · Cisco Secure Firewall Threat Defense (FTD) Software | affected 7.2.0 ; affected 7.2.0.1 ; affected 7.2.1 ; affected 7.2.2 ; affected 7.2.3 ; affected 7.2.4 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |