Intel

CVE-2026-20222

Eine Schwachstelle in der EIGRP-Implementierung in der Cisco Secure Firewall Adaptive Security Appliance (ASA) Software und der Cisco Sec…

highEPSS 0.2%

Description

A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate to an affected device. A successful exploit could allow the attacker to trigger a memory leak that will eventually cause the affected device to reload unexpectedly.

Source: BSI CSAFBSI WID Portalcvelistv5cisco_csafNVD (NIST)CVE.org (MITRE)

Metrics

XIEM Effective CVSS
7.4
Source: nvd-v3
EPSS percentile
5.5 %
Low — this CVE sits in the lower 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
high
Priority score
67.24
Exploit maturity
no public PoC known
CVSS v3
7.4
EPSS score
0.2 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-09-16 21:17 UTC
CWE
CWE-401

Weakness classes (CWE)

  • CWE-401Variant

    Missing Release of Memory after Effective Lifetime

    The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

    cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-09-17 15:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • SSVC: {"id":"CVE-2026-20222","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
  2. New CVE Received2026-09-16 21:17 UTC· psirt@cisco.com
    • Description: A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper resource management when handling EIGRP update messages. An attacker could exploit this vulnerability by sending crafted EIGRP updates at a high rate to an affected device. A successful exploit could allow the attacker to trigger a memory leak that will eventually cause the affected device to reload unexpectedly.
    • CVSS V3.1: AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
    • CWE: CWE-401
    • Affected: New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/20xxx/CVE-2026-20222.json">CVE-2026-20222</a>

Linked advisories