CVE-2025-20182
Reported by cisco · Published May 7, 2025
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.12.3, 9.8.3, 9.12.1 |
| Cisco | Cisco Firepower Threat Defense Software | 6.2.3.14, 6.4.0.1, 6.2.3.7 |
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.12.4.39, 9.8.4.44, 9.18.1 |
| Cisco | Cisco Firepower Threat Defense Software | 6.4.0.1, 6.2.3.7, 6.2.3 |
Timeline
- May 7, 2025 CVE Published
- May 7, 2025 PoC Published (5 in total, the first dated here)
- May 7, 2025 CVE Updated
- May 8, 2025 EPSS Score (30 in total, the first dated here)
- May 10, 2025 Coalition ESS Score (19 in total, the first dated here)
- Mar 17, 2026 Security Advisory (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-20182
vulnetix vdb fixes CVE-2025-20182Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-20182/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart