Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gv7m-f47c-w86q

Опубликовано: 07 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.

EPSS

Процентиль: 30%
0.00114
Низкий

8.6 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.6
nvd
9 месяцев назад

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.

CVSS3: 8.6
fstec
9 месяцев назад

Уязвимость операционных систем Cisco IOS и IOS XE, микропрограммного обеспечения межсетевых экранов Cisco Firepower Threat Defense (FTD), Cisco Adaptive Security Appliance (ASA), связанная с записью за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 30%
0.00114
Низкий

8.6 High

CVSS3

Дефекты

CWE-787