A buffer overflow vulnerability exists in the IPsec implementation on Versa VOS (Versa FlexVNF). The flaw occurs during the IKE Authentication phase when a maliciously crafted IKE Auth packet with an oversized Remote ID causes the vsmd process to crash, resulting in denial of service. VOS nodes configured with specific IPsec VPN profiles using WAN interfaces as endpoints are vulnerable, including Controllers, Hub Controllers, and SSE Gateways. Nodes not accessible from the Internet are not affected.