Description
The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17), 9.0 before 9.0(4.37), 9.1 before 9.1(6.8), 9.2 before 9.2(4), and 9.3 before 9.3(3) allows remote attackers to cause a denial of service (device reload) via crafted ISAKMP UDP packets, aka Bug ID CSCus94026.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033914
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151021-asa-ike
Scores
EPSS
0.0217
EPSS Percentile
80.4%
Details
CWE
CWE-399
Status
published
Products (50)
cisco/adaptive_security_appliance_software
7.2.1
cisco/adaptive_security_appliance_software
7.2.1.9
cisco/adaptive_security_appliance_software
7.2.1.13
cisco/adaptive_security_appliance_software
7.2.1.19
cisco/adaptive_security_appliance_software
7.2.1.24
cisco/adaptive_security_appliance_software
7.2.2
cisco/adaptive_security_appliance_software
7.2.2.6
cisco/adaptive_security_appliance_software
7.2.2.10
cisco/adaptive_security_appliance_software
7.2.2.14
cisco/adaptive_security_appliance_software
7.2.2.18
... and 40 more
Published
Oct 25, 2015
Tracked Since
Feb 18, 2026