This vulnerability affects the EIGRP implementation in Cisco Secure Firewall ASA and FTD Software. Due to improper resource management when processing EIGRP update messages, an attacker can send crafted updates at a high rate to cause a memory leak. This memory leak eventually causes the affected device to reload unexpectedly, resulting in a denial of service condition. The vulnerability requires an adjacent attacker and does not require authentication. The CVSS v3.1 base score is 7.4, indicating high severity with attack vector adjacent network, low attack complexity, no privileges required, no user interaction, and scope changed. The impact is limited to availability (denial of service).

Successful exploitation results in a denial of service condition by causing the affected Cisco Secure Firewall ASA or FTD device to reload unexpectedly due to a memory leak. There is no impact on confidentiality or integrity. The attack requires adjacency and no authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, limit exposure by controlling adjacency to trusted devices and monitoring for unusual EIGRP update traffic patterns.