CVE-2025-20222: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Buffer Vulnerability
A vulnerability in the RADIUS proxy feature for the IPsec VPN feature of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper processing of IPv6 packets. An attacker could exploit this vulnerability by sending IPv6 packets over an IPsec VPN connection to an affected device. A successful exploit could allow the attacker to trigger a reload of the device, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20222?
CVE-2025-20222 has a high severity rating due to its potential to cause denial of service conditions.
How do I fix CVE-2025-20222?
To fix CVE-2025-20222, ensure that you update to the latest version of Cisco Secure Firewall Adaptive Security Appliance Software or Cisco Secure Firewall Threat Defense Software.
What products are affected by CVE-2025-20222?
CVE-2025-20222 affects Cisco Secure Firewall Adaptive Security Appliance Software and Cisco Secure Firewall Threat Defense Software.
Can CVE-2025-20222 be exploited remotely?
Yes, CVE-2025-20222 can be exploited by an unauthenticated, remote attacker.
What is the impact of CVE-2025-20222 on network security?
The impact of CVE-2025-20222 on network security is the potential for causing a denial of service, disrupting normal operational functionality.