The vulnerability of the Internet Key Exchange (IKEv2) implementation of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

🗓️ 07 Dec 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

IKEv2 memory after free flaw in Cisco ASA and FTD can cause service disruption with crafted messages.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2021-40125	27 Oct 202122:16	–	circl
Cisco	Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability	27 Oct 202116:00	–	cisco
Tenable Nessus	Cisco Adaptive Security Appliance Software IKEv2 Site-to-Site VPN Denial of Service (cisco-sa-asaftd-ikev2-dos-g4cmrr7C)	9 May 202200:00	–	nessus
Tenable Nessus	Cisco Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service (cisco-sa-asaftd-ikev2-dos-g4cmrr7C)	9 May 202200:00	–	nessus
CNNVD	Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）资源管理错误漏洞	27 Oct 202100:00	–	cnnvd
CVE	CVE-2021-40125	27 Oct 202118:50	–	cve
Cvelist	CVE-2021-40125 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability	27 Oct 202118:50	–	cvelist
EUVD	EUVD-2021-27312	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco Adaptive Security Appliance (ASA)	28 Oct 202100:00	–	ncsc
NVD	CVE-2021-40125	27 Oct 202119:15	–	nvd

Vulners

Node

cisco_systems firepower_threat_defenseRange<6.4.0.13

OR

cisco_systems firepower_threat_defenseRange6.7.0–6.7.0.3

OR

cisco_systems firepower_threat_defenseRange7.0.0–7.0.1

OR

cisco_systems adaptive_security_applianceRange9.15–9.15.1.17

OR

cisco_systems firepower_threat_defenseRange6.5.0–6.6.5

OR

cisco_systems adaptive_security_applianceRange9.13–9.14.3.9

OR

cisco_systems adaptive_security_applianceRange9.8–9.8.4.40

OR

cisco_systems adaptive_security_applianceRange9.9–9.12.4.30

OR

cisco_systems adaptive_security_applianceRange9.16–9.16.2

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ikev2-dos-g4cmrr7C
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-40125
web	www.web.nvd.nist.gov/view/vuln/detail

07 Dec 2021 00:00Current

CVSS 35.3

CVSS 26.3

EPSS0.00332

Internet Key Exchange Cisco ASA Firepower Threat Defense Memory after free Service disruption Crafted messages