BugZero | Cisco BugID CSCuq65871 - IKEV2 PoD/CoA should use audit-session-id instead ...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCuq65871 - IKEV2 PoD/CoA should use audit-session-id instead ...

ODD
Cisco
CSCuq65871

Cisco - Defect ID: CSCuq65871

IKEV2 PoD/CoA should use audit-session-id instead of Calling-Station-ID

ODD
Cisco
CSCuq65871

Cisco - Defect ID: CSCuq65871

IKEV2 PoD/CoA should use audit-session-id instead of Calling-Station-ID

Last updated on February 25th, 2026

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Bug Details

Description

Symptom

Should use audit-session-id instead of Calling-Station-ID for PoD/Change Of Authorization Calling-Station-ID attribute allows the NAS to send in the Access-Request packet the phone number that the call came from, using Automatic Number Identification (ANI) or similar technology. It is only used in Access-Request packets. This attribute have been replaced by ip address. In order to implement Change of authorization, changes were made and calling-station-id have been used for Change of authorization which does not keep its value as an ip address.This has caused issues in environment where calling-station-id is used to detect VPN assigned ip for 3G. Both ASA and all the 6500/3xxx switches use Cisco av attribute audit-session-id to provide a unique session id for Change of authorization. This is a request to use audit-session-id for change of authorization instead Calling-Station-id

Conditions

AnyConnect IKev2 with radius authentication and authorization

Workaround

None

Further Problem Description

Change history

2026-02-25 Added: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Top Cisco Defects

9.7Defect ID: CSCwq31287
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
9.7Defect ID: CSCwt50498
Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability
9.7Defect ID: CSCwa82553
ISE 3.1 default route is on the incorrect interface if bonding is configured
9.7Defect ID: CSCwj74769
After [non]pairwise key enabling and reboot, bfd ip and port mismatch on device.
9.7Defect ID: CSCvv15096
9200L: SYS-3-CPUHOG: Task is running for (2843)msecs, more than (2000)msecs process = SAUtilReport.

Ready to prevent the next vendor outage?

Links

Original Vendor Announcement

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent