CVE-2026-20013

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-20013
A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network. This vulnerability is due to memory exhaustion caused by not freeing memory during IKEv2 packet processing. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust resources, causing a DoS condition that will eventually require the device to manually reload.

5.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*
History

16 Apr 2026, 20:11

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en la característica IKEv2 de Cisco Secure Cortafuegos ASA Software y Cisco Secure FTD Software podría permitir a un atacante remoto no autenticado causar una condición DoS en un dispositivo afectado que también podría impactar la disponibilidad de los servicios a dispositivos en otras partes de la red. Esta vulnerabilidad se debe al agotamiento de la memoria causado por no liberar memoria durante el procesamiento de paquetes IKEv2. Un atacante podría explotar esta vulnerabilidad enviando paquetes IKEv2 manipulados a un dispositivo afectado. Un exploit exitoso podría permitir al atacante agotar los recursos, causando una condición DoS que eventualmente requerirá que el dispositivo se reinicie manualmente.
First Time Cisco firepower Threat Defense Software
Cisco
Cisco adaptive Security Appliance Software
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG - () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-eBueGdEG - Vendor Advisory
CPE cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

04 Mar 2026, 18:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-04 18:16

Updated : 2026-04-16 20:11

NVD link : CVE-2026-20013

Mitre link : CVE-2026-20013

CVE.ORG link : CVE-2026-20013

JSON object : View

Products Affected

cisco

  • firepower_threat_defense_software
  • adaptive_security_appliance_software
CWE
CWE-401

Missing Release of Memory after Effective Lifetime