CVE-2024-20426

Summary

A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol for VPN termination of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted IKEv2 traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.1.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.7affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.2.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3.39affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3.46affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3.53affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3.55affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.3.56affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4.8affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4.22affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.18.4.29affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.9affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.12affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.18affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.22affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.24affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.27affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.28affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.19.1.31affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.20.1affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.20.1.5affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.20.2affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.20.2.10affected
CiscoCisco Adaptive Security Appliance (ASA) Software9.20.2.21affected
CiscoCisco Firepower Threat Defense Software7.2.0affected
CiscoCisco Firepower Threat Defense Software7.2.0.1affected
CiscoCisco Firepower Threat Defense Software7.2.1affected
CiscoCisco Firepower Threat Defense Software7.2.2affected
CiscoCisco Firepower Threat Defense Software7.2.3affected
CiscoCisco Firepower Threat Defense Software7.2.4affected
CiscoCisco Firepower Threat Defense Software7.2.4.1affected
CiscoCisco Firepower Threat Defense Software7.2.5affected
CiscoCisco Firepower Threat Defense Software7.2.5.1affected
CiscoCisco Firepower Threat Defense Software7.2.6affected
CiscoCisco Firepower Threat Defense Software7.2.7affected
CiscoCisco Firepower Threat Defense Software7.2.5.2affected
CiscoCisco Firepower Threat Defense Software7.2.8affected
CiscoCisco Firepower Threat Defense Software7.2.8.1affected
CiscoCisco Firepower Threat Defense Software7.3.0affected
CiscoCisco Firepower Threat Defense Software7.3.1affected
CiscoCisco Firepower Threat Defense Software7.3.1.1affected
CiscoCisco Firepower Threat Defense Software7.3.1.2affected
CiscoCisco Firepower Threat Defense Software7.4.0affected
CiscoCisco Firepower Threat Defense Software7.4.1affected
CiscoCisco Firepower Threat Defense Software7.4.1.1affected

Weaknesses

  • CWE-476: NULL Pointer Dereference

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References