CVE-2025-20224

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a denial of service (DoS) condition. This vulnerability is due to improper parsing of IKEv2 packets. An attacker could exploit this vulnerability by sending a continuous stream of crafted IKEv2 packets to an affected device. A successful exploit could allow the attacker to partially exhaust system memory, causing system instability like being unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from this condition.

• CWE-401

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy

Published

Aug 14, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20219A vulnerability in the implementation of access control rule…5.3
• CVE-2025-2022Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote C…7.8
• CVE-2025-20220A vulnerability in the CLI of Cisco Secure Firewall Manageme…6
• CVE-2025-20221A vulnerability in the packet filtering features of Cisco IO…9.1
• CVE-2025-20222A vulnerability in the RADIUS proxy feature for the IPsec VP…8.6
• CVE-2025-20223A vulnerability in Cisco Catalyst Center, formerly Cisco DNA…4.7
• CVE-2025-20225A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8
• CVE-2025-20226In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and…5.7
• CVE-2025-20227In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and…4.3
• CVE-2025-20228In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8 …6.5
• CVE-2025-20229In Splunk Enterprise versions below 9.3.3, 9.2.5, and 9.1.8…8
• CVE-2025-2023Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote…7.8