BugZero | Cisco BugID CSCuq65871 - IKEV2 PoD/CoA should use audit-session-id instead ...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

BugZero Prevent
BugZero Plan
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCuq65871 - IKEV2 PoD/CoA should use audit-session-id instead ...

ODD
Cisco
CSCuq65871

Cisco - Defect ID: CSCuq65871

IKEV2 PoD/CoA should use audit-session-id instead of Calling-Station-ID

ODD
Cisco
CSCuq65871

Cisco - Defect ID: CSCuq65871

IKEV2 PoD/CoA should use audit-session-id instead of Calling-Station-ID

Last updated on February 25th, 2026

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Bug Details

Description

Symptom

Should use audit-session-id instead of Calling-Station-ID for PoD/Change Of Authorization Calling-Station-ID attribute allows the NAS to send in the Access-Request packet the phone number that the call came from, using Automatic Number Identification (ANI) or similar technology. It is only used in Access-Request packets. This attribute have been replaced by ip address. In order to implement Change of authorization, changes were made and calling-station-id have been used for Change of authorization which does not keep its value as an ip address.This has caused issues in environment where calling-station-id is used to detect VPN assigned ip for 3G. Both ASA and all the 6500/3xxx switches use Cisco av attribute audit-session-id to provide a unique session id for Change of authorization. This is a request to use audit-session-id for change of authorization instead Calling-Station-id

Conditions

AnyConnect IKev2 with radius authentication and authorization

Workaround

None

Further Problem Description

Change history

2026-02-25 Added: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1i, 16.10.1s, 16.11.1, 16.11.1a, 16.2.1, 16.2.2, 16.3.1, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3h, 3.10.10S_V153_3_S10_FC2, 3.10.7S_V153_3_S7_FC1, 3.10.8S_V153_3_S8_FC1, 3.10.8aS_V153_3_S8A_FC1, 3.10.9S_V153_3_S9_FC2, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.4S_V155_2_S4_FC1, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.6.4E_V152_2_E4

Top Cisco Defects

9.7Defect ID: CSCvf84211
WLC dataplane reloads unexpectedly due to core 0 hung and RML interrupt handling
9.7Defect ID: CSCvz07394
2960X Stack may observe hang/freeze of member switches or complete stack.
9.7Defect ID: CSCvm90995
ASR1000-RP2: Rommon fails to boot Cisco IOS software of 1GB size
9.7Defect ID: CSCwc94466
Cisco ASA/FTD Firepower 2100 SSL/TLS Denial of Service Vulnerability
9.7Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability

Ready to prevent the next vendor outage?

Links

Original Vendor Announcement

Cisco Integration

Learn more about where this data comes from

Cisco Integration

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent