A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition on the affected device.

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability.

  - A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive     Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and     Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)     condition on an affected device. This vulnerability is due to insufficient input validation when     processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic     to an affected device. A successful exploit could allow the attacker to cause the device to reload,     resulting in a DoS condition on the affected device. (CVE-2025-20182)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco Adaptive Security Appliance (ASA) Software is affected by a vulnerability.

  - A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive     Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and     Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)     condition on an affected device. This vulnerability is due to insufficient input validation when     processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic     to an affected device. A successful exploit could allow the attacker to cause the device to reload,     resulting in a DoS condition on the affected device. (CVE-2025-20182)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco IOS Software is affected by a vulnerability.

  - A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive     Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and     Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)     condition on an affected device. This vulnerability is due to insufficient input validation when     processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic     to an affected device. A successful exploit could allow the attacker to cause the device to reload,     resulting in a DoS condition on the affected device. (CVE-2025-20182)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability.

  - A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive     Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and     Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)     condition on an affected device. This vulnerability is due to insufficient input validation when     processing IKEv2 messages. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic     to an affected device. A successful exploit could allow the attacker to cause the device to reload,     resulting in a DoS condition on the affected device. (CVE-2025-20182)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	Name	Product	Family	Severity
325644	Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)	Nessus	CISCO	high
325643	Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)	Nessus	CISCO	high
325642	Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)	Nessus	CISCO	high
325641	Cisco Adaptive Security Appliance Software, Firepower Threat Defense Software, IOS Software, and IOS XE Software IKEv2 DoS (cisco-sa-multiprod-ikev2-dos-gPctUqv2)	Nessus	CISCO	high

Detections

Analytics

CVE-2025-20182

high

Tenable Plugins

high

high

high

high