CISCO-CVE-2025-20253

HIGH8.6

Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerability

Published Aug 14, 2025

Modified 6 months ago

Affected Packages

Cisco IOS

CiscoIOS

Affected versions:

12.2(6)I115.0(2)EJ15.0(2)EJ115.0(2)EK15.0(2)EK115.0(2)EX15.0(2)EX115.0(2)EX1015.0(2)EX1115.0(2)EX12+557 more

Cisco IOS XE

CiscoIOSXE

Affected versions:

16.12.1417.12.1z517.4.1c17.6.1y3.10.0E3.10.0cE3.10.1E3.10.1aE3.10.1sE3.10.2E+77 more

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Upstream

Ecosystems

Timeline

PublishedAug 14, 2025

ModifiedAug 14, 2025