A vulnerability in the Internet Key Exchange Version 2 (IKEv2) implementation of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to trigger a denial of service (DoS) condition on an affected device. This vulnerability is due to improper control of a resource. An attacker with the ability to spoof a trusted IKEv2 site-to-site VPN peer and in possession of valid IKEv2 credentials for that peer could exploit this vulnerability by sending malformed, authenticated IKEv2 messages to an affected device. A successful exploit could allow the attacker to trigger a reload of the device.
Metrics
Affected Vendors & Products
References
History
Thu, 07 Nov 2024 22:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2021-10-27T18:50:09.794256Z
Updated: 2024-11-07T21:46:26.254Z
Reserved: 2021-08-25T00:00:00
Link: CVE-2021-40125
Vulnrichment
Updated: 2024-08-04T02:27:31.867Z
NVD
Status : Modified
Published: 2021-10-27T19:15:08.877
Modified: 2024-11-21T06:23:37.697
Link: CVE-2021-40125
Redhat
No data.