CVE-2025-20225

Two vulnerabilities in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a DoS condition. These vulnerabilities are due to the improper processing of IKEv2 packets. An attacker could exploit these vulnerabilities by sending crafted IKEv2 packets to an affected device. A successful exploit of Cisco IOS and IOS XE Software could allow the attacker to cause a DoS condition, which would cause the affected device to reload. A successful exploit of Cisco Secure Firewall ASA and Secure FTD Software could allow the attacker to partially exhaust system memory, causing system instability such as being unable to establish new IKEv2 VPN sessions, which requires a manual reboot of the device to recover from this condition.

The following products are affected by CVE-2025-20225 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-20225.

URL	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy