CISCO: Reference: Reference: Cisco Security Advisory – Cisco Secure Firewall ASA/FTD EIGRP DoS

CISCO Security Advisory

Published Date: Not specified

CVE: CVE-2026-20222

Advisory Summary

🗓️ Published Date: 18 Sep 2026

📌 🔷 Title: Cisco ASA/FTD EIGRP Denial of Service (DoS) via Crafted Updates

⚠️ 【ALARM】 High-Risk DoS Condition (CVE-2026-20222)
Cisco disclosed a vulnerability in the EIGRP implementation within Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. A nearby/adjacent, unauthenticated attacker may be able to force an unexpected device reload, effectively creating a denial of service.

• Root cause: improper resource management while processing EIGRP update messages
• Exploitation: attacker sends crafted EIGRP updates at high rate
• Impact: triggers a memory leak that eventually leads to an unexpected reload

• Cisco has released software updates to address the issue.
• No workaround is available, so patching is the primary and recommended mitigation.

✅ Actionable Recommendations (Market/Operations Focus)
1. Prioritize upgrade/patch deployment for affected ASA/FTD versions per Cisco’s advisory.
2. Audit EIGRP exposure: confirm which interfaces/neighbors are permitted to send EIGRP updates.
3. Rate/neighbor controls (where feasible) to reduce the likelihood of high-rate crafted update flooding.
4. Monitor for reload indicators and anomalous EIGRP traffic patterns during the interim period prior to patching.

-2026-20222

Reference: Vendor Advisory