CVE-2026-20222

Summary

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.

This vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate to an affected device. A successful exploit could allow the attacker to trigger a memory leak that will eventually cause the affected device to reload unexpectedly.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.12affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.18affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.24affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.27affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.21affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.31affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.2.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.37affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.38affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.1.6affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.16affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.19.1.42affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.3.20affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.7affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.13affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.10affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.24.1affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.14affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.20affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.19affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.26affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.2.32affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.3affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.24.1.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.22affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.24.1.9affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.28affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.22.3.5affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.195affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.30affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.24.1.155affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.23.1.32affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.24.1.11affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.34affected
CiscoCisco Secure Firewall Adaptive Security Appliance (ASA) Software9.20.4.235affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.1.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.3.1.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.2affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.10affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.11affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.2.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.7.10.1affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.2.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.3affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.6.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software10.0.0affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.4affected
CiscoCisco Secure Firewall Threat Defense (FTD) Software7.4.7affected

Weaknesses

  • CWE-401: Missing Release of Memory after Effective Lifetime

References