Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
10
10
#TRUSTED 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
#TRUST-RSA-SHA256 661789eddd42e6574cb47329381f2ee61df80b45901a0fbc230160ac92f52b9dd35ab8760b89f47dbef20a1831dfb46199a13f2a50fe2ced27f3a3d6365abf651b73e11593c2a32236d2e894d2959f49ca5eeafd57eb0857f714f36c3dea08fcac6b71e7a8d37073b71abde6b5db46ded2d74d959fa5abfece2714321e71bc8ac63b316f0018f658bdd0798d353f24abe2388721452c465b4cd810c2ae6a22e2fbde9dcdea6cb18ae186378a1a829b92171a308516849e8281fabed2f2fac11e55d73b7a17a7a80454f0c8c901a9cd5afb1c281662ac2712946b3c7042c029b7a3d29e7a82d68881c0e756b73aafc57173686804c3419617efd55e813f316eda4c13bb48a491e420207fc2eee9662ecd1c4b18153a2acb00cd7d2708efdcef6babdff652ac6a2f33e80481b777df9bb4ee9f65e80a9931226ff276b78479081c15ca3a430aa702153201c86b45c61a87a8ff86b314280d5b7fdccf05f3616602aa7cfb48d9bd521a70c5d4cb73103f8d007e6f4f6c03449402bb4e61c075e3783440522d402dc08b966d7e16bc5e1cfdedb662da89e0c1dd6ac5ad18bafde018bc57264040f1a1598a8863bbf6754f80877b9bc4b97c5f446101a7f0f9cc8e0bcd34611547ca6694833bdc6d76bd07a32952442e5443b1e1cb37b260904096549d1419770ebab51026bd83cfd3e3cc1587d58a4a0eb26c92bace6b69355af71e
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(331354);
script_version("1.3");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/07");
script_cve_id("CVE-2025-20225", "CVE-2025-20239", "CVE-2025-20253");
script_xref(name:"CISCO-BUG-ID", value:"CSCwn73399");
script_xref(name:"CISCO-BUG-ID", value:"CSCwn83263");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo15021");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo15022");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo15023");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo15024");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo15026");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo20388");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo49928");
script_xref(name:"CISCO-BUG-ID", value:"CSCwo49948");
script_xref(name:"CISCO-SA", value:"cisco-sa-asa-ftd-ios-dos-DOESHWHy");
script_xref(name:"IAVA", value:"2025-A-0612");
script_name(english:"Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)");
script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch.");
script_set_attribute(attribute:"description", value:
"According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities.
- A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA
Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to
reload, resulting in a DoS condition. This vulnerability is due to the improper processing of IKEv2
packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected
device. A successful exploit could allow the attacker to cause an infinite loop that exhausts resources
and could cause the device to reload. (CVE-2025-20253)
- A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco IOS Software, IOS XE
Software, Secure Firewall Adaptive Security Appliance (ASA) Software, and Secure Firewall Threat Defense
(FTD) Software could allow an unauthenticated, remote attacker to trigger a memory leak, resulting in a
denial of service (DoS) condition. This vulnerability is due to a lack of proper processing of IKEv2
packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected
device. In the case of Cisco IOS and IOS XE Software, a successful exploit could allow the attacker to
cause the device to reload unexpectedly. In the case of Cisco ASA and FTD Software, a successful exploit
could allow the attacker to partially exhaust system memory, causing system instability such as being
unable to establish new IKEv2 VPN sessions. A manual reboot of the device is required to recover from
this condition. (CVE-2025-20225, CVE-2025-20239)
Please see the included Cisco BIDs and Cisco Security Advisory for more information.");
# https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-DOESHWHy
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?13cf09e9");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn73399");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwn83263");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo15021");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo15022");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo15023");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo15024");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo15026");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo20388");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo49928");
script_set_attribute(attribute:"see_also", value:"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwo49948");
script_set_attribute(attribute:"solution", value:
"Upgrade to the relevant fixed version referenced in Cisco bug IDs CSCwn73399, CSCwo20388, CSCwo49948");
script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-20253");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/20");
script_set_attribute(attribute:"patch_publication_date", value:"2025/08/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/07/31");
script_set_attribute(attribute:"plugin_type", value:"combined");
script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios");
script_set_attribute(attribute:"stig_severity", value:"I");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"CISCO");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("cisco_ios_version.nasl");
script_require_keys("Host/Cisco/IOS/Version");
exit(0);
}
include('cisco_workarounds.inc');
include('ccf.inc');
var product_info = cisco::get_product_info(name:'Cisco IOS');
var version_list = make_list(
'12.2(6)I1',
'15.0(2)EJ', '15.0(2)EJ1', '15.0(2)EK', '15.0(2)EK1', '15.0(2)EX', '15.0(2)EX1', '15.0(2)EX10',
'15.0(2)EX11', '15.0(2)EX12', '15.0(2)EX13', '15.0(2)EX2', '15.0(2)EX3', '15.0(2)EX4', '15.0(2)EX5',
'15.0(2)EX6', '15.0(2)EX7', '15.0(2)EX8', '15.0(2)EY', '15.0(2)EY1', '15.0(2)EY2', '15.0(2)EY3',
'15.0(2)EZ', '15.0(2)SE', '15.0(2)SE1', '15.0(2)SE10', '15.0(2)SE10a', '15.0(2)SE11', '15.0(2)SE12',
'15.0(2)SE13', '15.0(2)SE13a', '15.0(2)SE13b', '15.0(2)SE13c', '15.0(2)SE2', '15.0(2)SE3', '15.0(2)SE4',
'15.0(2)SE5', '15.0(2)SE6', '15.0(2)SE7', '15.0(2)SE8', '15.0(2)SE9', '15.0(2a)EX5', '15.0(2a)SE9',
'15.1(1)SG', '15.1(1)SG1', '15.1(1)SG2', '15.1(1)SY', '15.1(1)SY1', '15.1(1)SY2', '15.1(1)SY3',
'15.1(1)SY4', '15.1(1)SY5', '15.1(1)SY6', '15.1(1)T', '15.1(1)T1', '15.1(1)T2', '15.1(1)T3',
'15.1(1)T4', '15.1(1)T5', '15.1(1)XB1', '15.1(1)XB2', '15.1(1)XB3', '15.1(2)GC', '15.1(2)GC1',
'15.1(2)GC2', '15.1(2)SG', '15.1(2)SG1', '15.1(2)SG2', '15.1(2)SG3', '15.1(2)SG4', '15.1(2)SG5',
'15.1(2)SG6', '15.1(2)SG7', '15.1(2)SG8', '15.1(2)SY', '15.1(2)SY1', '15.1(2)SY10', '15.1(2)SY11',
'15.1(2)SY12', '15.1(2)SY13', '15.1(2)SY14', '15.1(2)SY15', '15.1(2)SY16', '15.1(2)SY16a', '15.1(2)SY2',
'15.1(2)SY3', '15.1(2)SY4', '15.1(2)SY4a', '15.1(2)SY5', '15.1(2)SY6', '15.1(2)SY7', '15.1(2)SY8',
'15.1(2)SY9', '15.1(2)T', '15.1(2)T0a', '15.1(2)T1', '15.1(2)T2', '15.1(2)T2a', '15.1(2)T3',
'15.1(2)T4', '15.1(2)T5', '15.1(3)MRA3', '15.1(3)MRA4', '15.1(3)SVB1', '15.1(3)SVB2', '15.1(3)SVD',
'15.1(3)SVD1', '15.1(3)SVD2', '15.1(3)SVD3', '15.1(3)SVE', '15.1(3)SVF', '15.1(3)SVF1', '15.1(3)SVF2',
'15.1(3)SVF2a', '15.1(3)SVF4b', '15.1(3)SVF4c', '15.1(3)SVF4d', '15.1(3)SVF4e', '15.1(3)SVF4f',
'15.1(3)SVG', '15.1(3)SVG1a', '15.1(3)SVG1b', '15.1(3)SVG1c', '15.1(3)SVG2', '15.1(3)SVG2a',
'15.1(3)SVG3', '15.1(3)SVG3a', '15.1(3)SVG3b', '15.1(3)SVG3c', '15.1(3)SVH', '15.1(3)SVH2',
'15.1(3)SVH4', '15.1(3)SVH4a', '15.1(3)SVI1a', '15.1(3)SVI2', '15.1(3)SVI2a', '15.1(3)SVI3',
'15.1(3)SVI31a', '15.1(3)SVI31b', '15.1(3)SVI3b', '15.1(3)SVI3c', '15.1(3)SVJ', '15.1(3)SVJ2',
'15.1(3)SVR1', '15.1(3)SVR10', '15.1(3)SVR2', '15.1(3)SVR3', '15.1(3)SVS', '15.1(3)SVS1',
'15.1(3)SVT1', '15.1(3)SVT2', '15.1(3)SVT3', '15.1(3)SVT4', '15.1(3)SVU1', '15.1(3)SVU10',
'15.1(3)SVU11', '15.1(3)SVU2', '15.1(3)SVU20', '15.1(3)SVU21', '15.1(3)SVV1', '15.1(3)SVV2',
'15.1(3)SVV3', '15.1(3)SVV4', '15.1(3)SVW', '15.1(3)SVW1', '15.1(3)SVX', '15.1(3)SVX1', '15.1(3)T',
'15.1(3)T1', '15.1(3)T2', '15.1(3)T3', '15.1(3)T4', '15.1(4)GC', '15.1(4)GC1', '15.1(4)GC2',
'15.1(4)M', '15.1(4)M0a', '15.1(4)M0b', '15.1(4)M1', '15.1(4)M10', '15.1(4)M12a', '15.1(4)M2',
'15.1(4)M3', '15.1(4)M3a', '15.1(4)M4', '15.1(4)M5', '15.1(4)M6', '15.1(4)M7', '15.1(4)M8',
'15.1(4)M9', '15.1(4)XB4', '15.1(4)XB5', '15.1(4)XB5a', '15.1(4)XB6', '15.1(4)XB7', '15.1(4)XB8',
'15.1(4)XB8a',
'15.2(1)E', '15.2(1)E1', '15.2(1)E2', '15.2(1)E3', '15.2(1)EY', '15.2(1)GC', '15.2(1)GC1',
'15.2(1)GC2', '15.2(1)SC1a', '15.2(1)SD1', '15.2(1)SD2', '15.2(1)SD3', '15.2(1)SD4', '15.2(1)SD6',
'15.2(1)SD6a', '15.2(1)SD7', '15.2(1)SD8', '15.2(1)SY', '15.2(1)SY0a', '15.2(1)SY1', '15.2(1)SY1a',
'15.2(1)SY2', '15.2(1)SY3', '15.2(1)SY4', '15.2(1)SY5', '15.2(1)SY6', '15.2(1)SY7', '15.2(1)SY8',
'15.2(2)E', '15.2(2)E1', '15.2(2)E10', '15.2(2)E10a', '15.2(2)E10b', '15.2(2)E10c', '15.2(2)E2',
'15.2(2)E3', '15.2(2)E4', '15.2(2)E5', '15.2(2)E5a', '15.2(2)E5b', '15.2(2)E6', '15.2(2)E7',
'15.2(2)E8', '15.2(2)E9', '15.2(2)E9a', '15.2(2)EA', '15.2(2)EA2', '15.2(2)EA3', '15.2(2)EB',
'15.2(2)EB1', '15.2(2)EB2', '15.2(2)GC', '15.2(2)SC', '15.2(2)SC1', '15.2(2)SC3', '15.2(2)SC4',
'15.2(2)SY', '15.2(2)SY1', '15.2(2)SY2', '15.2(2)SY3', '15.2(2a)E1', '15.2(2a)E2', '15.2(2b)E',
'15.2(3)E', '15.2(3)E1', '15.2(3)E2', '15.2(3)E3', '15.2(3)E4', '15.2(3)EA', '15.2(3)GC', '15.2(3)GC1',
'15.2(3a)E', '15.2(3m)E2', '15.2(3m)E7', '15.2(3m)E8', '15.2(4)E', '15.2(4)E1', '15.2(4)E10',
'15.2(4)E10a', '15.2(4)E10b', '15.2(4)E10c', '15.2(4)E10d', '15.2(4)E10e', '15.2(4)E2', '15.2(4)E3',
'15.2(4)E4', '15.2(4)E5', '15.2(4)E6', '15.2(4)E7', '15.2(4)E8', '15.2(4)E9', '15.2(4)EA', '15.2(4)EA1',
'15.2(4)EA4', '15.2(4)EA5', '15.2(4)EA6', '15.2(4)EA7', '15.2(4)EA8', '15.2(4)EA9', '15.2(4)EA9a',
'15.2(4)EC1', '15.2(4)EC2', '15.2(4)GC', '15.2(4)GC1', '15.2(4)GC2', '15.2(4)GC3', '15.2(4)JN',
'15.2(4)M', '15.2(4)M1', '15.2(4)M10', '15.2(4)M11', '15.2(4)M2', '15.2(4)M3', '15.2(4)M4',
'15.2(4)M5', '15.2(4)M6', '15.2(4)M6a', '15.2(4)M6b', '15.2(4)M7', '15.2(4)M8', '15.2(4)M9',
'15.2(4m)E1', '15.2(4m)E2', '15.2(4m)E3', '15.2(4n)E2', '15.2(4o)E2', '15.2(4o)E3', '15.2(4p)E1',
'15.2(4q)E1', '15.2(4s)E1', '15.2(5)E', '15.2(5)E1', '15.2(5)E2', '15.2(5)E2c', '15.2(5)EA',
'15.2(5a)E1', '15.2(5b)E', '15.2(6)E', '15.2(6)E0a', '15.2(6)E0c', '15.2(6)E1', '15.2(6)E1a',
'15.2(6)E1s', '15.2(6)E2', '15.2(6)E2a', '15.2(6)E3', '15.2(6)EB', '15.2(7)E', '15.2(7)E0a',
'15.2(7)E0b', '15.2(7)E0s', '15.2(7)E1', '15.2(7)E10', '15.2(7)E11', '15.2(7)E12', '15.2(7)E1a',
'15.2(7)E2', '15.2(7)E2b', '15.2(7)E3', '15.2(7)E4', '15.2(7)E5', '15.2(7)E6', '15.2(7)E7',
'15.2(7)E8', '15.2(7)E9', '15.2(7a)E0b', '15.2(7b)E0b', '15.2(8)E', '15.2(8)E1', '15.2(8)E2',
'15.2(8)E3', '15.2(8)E4', '15.2(8)E5', '15.2(8)E6', '15.2(8)E7',
'15.3(0)SY', '15.3(1)SY', '15.3(1)SY1', '15.3(1)SY2', '15.3(1)T', '15.3(1)T1', '15.3(1)T2',
'15.3(1)T3', '15.3(1)T4', '15.3(2)T', '15.3(2)T1', '15.3(2)T2', '15.3(2)T3', '15.3(2)T4',
'15.3(3)JPC5', '15.3(3)M', '15.3(3)M1', '15.3(3)M10', '15.3(3)M2', '15.3(3)M3', '15.3(3)M4',
'15.3(3)M5', '15.3(3)M6', '15.3(3)M7', '15.3(3)M8', '15.3(3)M8a', '15.3(3)M9', '15.3(3)XB12',
'15.4(1)CG', '15.4(1)CG1', '15.4(1)SY', '15.4(1)SY1', '15.4(1)SY2', '15.4(1)SY3', '15.4(1)SY4',
'15.4(1)T', '15.4(1)T1', '15.4(1)T2', '15.4(1)T3', '15.4(1)T4', '15.4(2)CG', '15.4(2)S3', '15.4(2)T',
'15.4(2)T1', '15.4(2)T2', '15.4(2)T3', '15.4(2)T4', '15.4(3)M', '15.4(3)M1', '15.4(3)M10',
'15.4(3)M2', '15.4(3)M3', '15.4(3)M4', '15.4(3)M5', '15.4(3)M6', '15.4(3)M6a', '15.4(3)M7',
'15.4(3)M7a', '15.4(3)M8', '15.4(3)M9', '15.4(3)S0e', '15.4(3)S0f',
'15.5(1)S', '15.5(1)S1', '15.5(1)S2', '15.5(1)S3', '15.5(1)S4', '15.5(1)SN', '15.5(1)SN1',
'15.5(1)SY', '15.5(1)SY1', '15.5(1)SY10', '15.5(1)SY11', '15.5(1)SY12', '15.5(1)SY13', '15.5(1)SY14',
'15.5(1)SY15', '15.5(1)SY2', '15.5(1)SY3', '15.5(1)SY4', '15.5(1)SY5', '15.5(1)SY6', '15.5(1)SY7',
'15.5(1)SY8', '15.5(1)SY9', '15.5(1)T', '15.5(1)T1', '15.5(1)T2', '15.5(1)T3', '15.5(1)T4',
'15.5(2)S', '15.5(2)S1', '15.5(2)S2', '15.5(2)S3', '15.5(2)S4', '15.5(2)SN', '15.5(2)T', '15.5(2)T1',
'15.5(2)T2', '15.5(2)T3', '15.5(2)T4', '15.5(2)XB', '15.5(3)M', '15.5(3)M0a', '15.5(3)M1',
'15.5(3)M10', '15.5(3)M11', '15.5(3)M11a', '15.5(3)M11b', '15.5(3)M2', '15.5(3)M2a', '15.5(3)M3',
'15.5(3)M4', '15.5(3)M4a', '15.5(3)M4b', '15.5(3)M4c', '15.5(3)M5', '15.5(3)M6', '15.5(3)M6a',
'15.5(3)M7', '15.5(3)M8', '15.5(3)M9', '15.5(3)S', '15.5(3)S0a', '15.5(3)S1', '15.5(3)S10',
'15.5(3)S10a', '15.5(3)S10b', '15.5(3)S1a', '15.5(3)S2', '15.5(3)S3', '15.5(3)S4', '15.5(3)S5',
'15.5(3)S6', '15.5(3)S6a', '15.5(3)S6b', '15.5(3)S7', '15.5(3)S8', '15.5(3)S9', '15.5(3)S9a',
'15.5(3)SN', '15.5(3)SN0a',
'15.6(1)S', '15.6(1)S1', '15.6(1)S2', '15.6(1)S3', '15.6(1)S4', '15.6(1)SN', '15.6(1)SN1',
'15.6(1)SN2', '15.6(1)SN3', '15.6(1)T', '15.6(1)T0a', '15.6(1)T1', '15.6(1)T2', '15.6(1)T3',
'15.6(2)S', '15.6(2)S1', '15.6(2)S2', '15.6(2)S3', '15.6(2)S4', '15.6(2)SN', '15.6(2)SP', '15.6(2)SP1',
'15.6(2)SP2', '15.6(2)SP3', '15.6(2)SP4', '15.6(2)SP5', '15.6(2)SP6', '15.6(2)SP7', '15.6(2)SP8',
'15.6(2)SP8a', '15.6(2)SP9', '15.6(2)T', '15.6(2)T0a', '15.6(2)T1', '15.6(2)T2', '15.6(2)T3',
'15.6(3)M', '15.6(3)M0a', '15.6(3)M1', '15.6(3)M1a', '15.6(3)M1b', '15.6(3)M2', '15.6(3)M2a',
'15.6(3)M3', '15.6(3)M3a', '15.6(3)M4', '15.6(3)M5', '15.6(3)M6', '15.6(3)M6a', '15.6(3)M6b',
'15.6(3)M7', '15.6(3)M8', '15.6(3)M9', '15.6(3)SN', '15.6(4)SN', '15.6(5)SN', '15.6(7)SN',
'15.6(7)SN1', '15.6(7)SN2',
'15.7(3)M', '15.7(3)M0a', '15.7(3)M1', '15.7(3)M10', '15.7(3)M10a', '15.7(3)M10b', '15.7(3)M2',
'15.7(3)M3', '15.7(3)M4', '15.7(3)M4a', '15.7(3)M4b', '15.7(3)M5', '15.7(3)M6', '15.7(3)M7',
'15.7(3)M8', '15.7(3)M9',
'15.8(3)M', '15.8(3)M0a', '15.8(3)M0b', '15.8(3)M1', '15.8(3)M1a', '15.8(3)M2', '15.8(3)M2a',
'15.8(3)M3', '15.8(3)M3a', '15.8(3)M3b', '15.8(3)M4', '15.8(3)M5', '15.8(3)M6', '15.8(3)M7',
'15.8(3)M8', '15.8(3)M9',
'15.9(3)M', '15.9(3)M0a', '15.9(3)M1', '15.9(3)M10', '15.9(3)M11', '15.9(3)M2', '15.9(3)M2a',
'15.9(3)M3', '15.9(3)M3a', '15.9(3)M3b', '15.9(3)M4', '15.9(3)M4a', '15.9(3)M5', '15.9(3)M6',
'15.9(3)M6a', '15.9(3)M6b', '15.9(3)M7', '15.9(3)M7a', '15.9(3)M8', '15.9(3)M8a', '15.9(3)M8b',
'15.9(3)M9', '15.9(3)M9a'
);
var workarounds = make_list(CISCO_WORKAROUNDS['generic_workaround'], CISCO_WORKAROUNDS['show_udp_ike']);
var workaround_params = WORKAROUND_CONFIG['show_crypto_map_ikev2_profile'];
var reporting = make_array(
'port' , product_info['port'],
'severity', SECURITY_HOLE,
'version' , product_info['version'],
'bug_id' , 'CSCwn73399, CSCwn83263, CSCwo15021, CSCwo15022, CSCwo15023, CSCwo15024, CSCwo15026, CSCwo20388, CSCwo49928, CSCwo49948',
'cmds' , make_list('show udp', 'show crypto map')
);
cisco::check_and_report(
product_info:product_info,
workarounds:workarounds,
workaround_params:workaround_params,
reporting:reporting,
vuln_versions:version_list,
require_all_workarounds:TRUE
);
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
07 Aug 2026 00:00Current
7.2High risk
Vulners AI Score7.2
CVSS 3.18.6
EPSS0.00675
SSVC