CVE-2016-9203: A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software co...

Security readout for executives and security teams

CVE-2016-9203 is a denial-of-service issue in Cisco ASR 5000 Series Software. A remote unauthenticated attacker could cause the IPsec manager process to reload through the IKEv2 feature. The cited sources do not indicate data theft, code execution, or active exploitation. Exposure is likely limited to Cisco ASR 5000 deployments running the affected 20.2.3 releases with IKEv2 enabled and reachable. The provided evidence does not support extending scope to other Cisco platforms or software trains. Prioritize remediation for carrier, VPN, or mobile-core environments where ASR 5000 IKEv2 services are reachable. Business risk is service disruption, not confirmed compromise, based on the available sources. Mitigation focus: Upgrade affected ASR 5000 systems to a Cisco-listed fixed release.; Review Cisco advisory cisco-sa-20161207-asr1 for platform-specific guidance.; Limit IKEv2 reachability to required peers where operationally feasible..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.