جزئیات آسیب‌پذیری

CVE-2026-20014

Cisco Secure Firewall Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense Software
CVSS 3.1
7.7بالا

شرح رسمی (انگلیسی)

A vulnerability in the IKEv2 feature of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an authenticated, remote attacker with valid VPN user credentials to cause a DoS condition on an affected device that may also impact the availability of services to devices elsewhere in the network. This vulnerability is due to the improper processing of IKEv2 packets. An attacker could exploit this vulnerability by sending crafted, authenticated IKEv2 packets to an affected device. A successful exploit could allow the attacker to exhaust memory, causing the device to reload.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.7بالا 3.1 CVEProject cvelistV5 (CNA) (cisco) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.2.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.39 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.46 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.53 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.55 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.3.56 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.22 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.24 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.29 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.34 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.40 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.47 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.50 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.52 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.53 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.57 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.66 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.67 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.68 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.18.4.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.12 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.18 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.22 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.24 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.27 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.28 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.31 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.37 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.38 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.42 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.19.1.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.1.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.2.10 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.2.21 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.2.22 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.10 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.16 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.20 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.3.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.20.4.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.1.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.1.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.22.2.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23.1.13 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23.1.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software 9.23.1.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.0.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.10 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.10.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.4.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.5 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.5.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.5.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.6 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.7 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.8 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.8.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.2.9 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.3.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.3.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.3.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.3.1.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.1.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.3 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.4.2.4 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.2 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.6.2.1 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.7.0 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.7.10 CVEProject cvelistV5 (CNA)
Cisco Cisco Secure Firewall Threat Defense (FTD) Software 7.7.10.1 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۱۲/۱۳
آخرین به‌روزرسانی
۱۴۰۴/۱۲/۱۴
وضعیت
منتشرشده
صادرکننده (CNA)
cisco

پیش‌بینی بهره‌برداری (EPSS)

۰٫۳۳٪
احتمال بهره‌برداری در ۳۰ روز
۲۷٫۱٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-401
    Missing Release of Memory after Effective Lifetime