Unscored severity · published Jul 27, 2006
CVE-2006-3906
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance Software · Cisco
7.0; 7.0(4); 7.0(5); 7.0.1.4; 7.0.4.3; 7.1(2) · source: NVD
IO
Ios · Cisco
All versions, or not specified · source: NVD
PA
Pix Asa Ids · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall · Cisco
6.2.2_.111; 6.2.3_(110); 6.3.3_(133); 6.3.5_(112) · source: NVD
PF
Pix Firewall 501 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 506 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 515e · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 520 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 525 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall 535 · Cisco
All versions, or not specified · source: NVD
PF
Pix Firewall Software · Cisco
2.7; 3.0; 3.1; 4.0; 4.1(6); 4.1(6b); +34 more · source: NVD
Affected product
AS
Adaptive Security Appliance Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3906
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3906
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2006-07/0531.html
securityreason.com
http://securityreason.com/securityalert/1293
securitytracker.com
http://securitytracker.com/id?1016582
www.cisco.com
http://www.cisco.com/en/US/tech/tk583/tk372/tsd_technology_security_response09186a00806f33d4.html
www.nta-monitor.com
http://www.nta-monitor.com/posts/2006/07/cisco-concentrator-dos.html
www.osvdb.org
http://www.osvdb.org/29068
More from Adaptive Security Appliance Software
9.9
CVE-2025-20333
Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
9.1
CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
8.8
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
8.6
CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
8.6
CVE-2025-20362
Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability