CVE-2026-20049

{"id": "CVE-2026-20049", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "published": "2026-03-04T18:16:17.863", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-esp-dos-uv7yD8P5", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-131"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to the allocation of an insufficiently sized block of memory. An attacker could exploit this vulnerability by sending crafted GCM-encrypted IPsec traffic to an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. To exploit this vulnerability, the attacker must have valid credentials to establish a VPN connection with the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en el procesamiento de tr\u00e1fico IPsec de Intercambio de Claves de Internet versi\u00f3n 2 (IKEv2) cifrado con el modo Galois/Counter (GCM) del software Cisco Secure Firewall Adaptive Security Appliance (ASA) y del software Cisco Secure Firewall Threat Defense (FTD) podr\u00eda permitir a un atacante remoto y autenticado causar una condici\u00f3n de denegaci\u00f3n de servicio (DoS) en un dispositivo afectado. Esta vulnerabilidad se debe a la asignaci\u00f3n de un bloque de memoria de tama\u00f1o insuficiente. Un atacante podr\u00eda explotar esta vulnerabilidad enviando tr\u00e1fico IPsec cifrado con GCM manipulado a un dispositivo afectado. Un exploit exitoso podr\u00eda permitir al atacante causar una recarga inesperada del dispositivo, lo que resultar\u00eda en una condici\u00f3n de DoS. Para explotar esta vulnerabilidad, el atacante debe tener credenciales v\u00e1lidas para establecer una conexi\u00f3n VPN con el dispositivo afectado."}], "lastModified": "2026-04-16T20:01:02.797", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EEB3313-6F7D-4FBA-A0ED-583BDD4971A1", "versionEndExcluding": "9.18.4.66", "versionStartIncluding": "9.18.1"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5403450D-9A71-42B7-A595-B62789944D02", "versionEndExcluding": "9.20.3.20", "versionStartIncluding": "9.19.1"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55B05CD4-4849-471F-ACC5-0E0478568A2D", "versionEndExcluding": "9.22.2.4", "versionStartIncluding": "9.22.1.1"}, {"criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44DD9349-BE3E-40BD-A6F0-2775F76DCF3E", "versionEndExcluding": "9.23.1.3", "versionStartIncluding": "9.23.1"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9751FAD-D226-4FE9-BB2E-4ECEDAD95853", "versionEndExcluding": "7.2.11", "versionStartIncluding": "7.2.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "737DB8CE-EC0B-4221-A8BF-3E64702DE092", "versionEndExcluding": "7.4.3", "versionStartIncluding": "7.3.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26A29A1A-8013-4CE1-8DE5-4C82778A1D96", "versionEndExcluding": "7.6.4", "versionStartIncluding": "7.6.0"}, {"criteria": "cpe:2.3:a:cisco:firepower_threat_defense_software:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5432354F-ECF5-4796-9E28-C7AE51405D09", "versionEndExcluding": "7.7.10", "versionStartIncluding": "7.7.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}