CVE-2005-4564: The Internet Key Exchange version 1 (IKEv1) implementation in ADTRAN NetVanta before 10.03.03.E might allow...

Security readout for executives and security teams

This CVE describes a denial-of-service issue in ADTRAN NetVanta IKEv1 handling before version 10.03.03.E. A remote attacker could send specially crafted IKE packets that may disrupt the device or VPN service. The sources do not indicate data theft, code execution, or confirmed active exploitation. Exposure is most likely where ADTRAN NetVanta devices run IKEv1/IPsec services reachable from untrusted networks. Environments with older firmware below 10.03.03.E are the primary concern. The bundle does not identify specific NetVanta models or deployment configurations. Treat this as a targeted availability risk for older VPN or edge routing infrastructure. Prioritize if NetVanta devices expose IKEv1 to the internet or support critical site connectivity. Business urgency is lower if no affected devices or IKEv1 exposure exist. Mitigation focus: Inventory ADTRAN NetVanta devices that provide IKEv1 or IPsec VPN services.; Confirm whether firmware is older than 10.03.03.E.; Follow ADTRAN guidance and update affected devices to a fixed supported release..

Prepared

Jun 29, 2026, 15:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.