BugZero | Cisco BugID CSCwi19849 - VPN load-balancing cluster encryption using Phase ...

Cisco - Defect ID: CSCwi19849

VPN load-balancing cluster encryption using Phase 2 deprecated ciphers

Cisco - Defect ID: CSCwi19849

VPN load-balancing cluster encryption using Phase 2 deprecated ciphers

Last updated on 5/7/2025

Overall: 6.16.1

Severity: 6.46.4

Lifecycle: 9.19.1

Popularity: 4.64.6

What is the BugZero Risk Score?

Vendor details

No defect details.

Overall: 6.16.1

Severity: 6.46.4

Lifecycle: 9.19.1

Popularity: 4.64.6

What is the BugZero Risk Score?

Vendor details

No defect details.

Symptom

An ikev1 tunnel is established between vpnlb peers when vpn load-balancing with cluster encryption is configured. Deprecated ciphers such as 3DES(encryption) and MD5(hash) are pushed for PHASE2.

Conditions

VPN load-balancing with cluster encryption configuration.

Workaround

None

Further Problem Description

Original Vendor Announcement

9.65Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.
9.65Defect ID: CSCwa92734
CUBE DTMF interworking fails from rtp-nte to OOB SIP methods
9.65Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.65Defect ID: CSCvo03458
PKI "revocation check crl none" does not fallback if CRL not reachable
9.65Defect ID: CSCvq05584
Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Cisco - Defect ID: CSCwi19849

VPN load-balancing cluster encryption using Phase 2 deprecated ciphers

Cisco - Defect ID: CSCwi19849

VPN load-balancing cluster encryption using Phase 2 deprecated ciphers

Last updated on 5/7/2025

Vendor details

Vendor details

Description

Symptom

Conditions

Workaround

Further Problem Description

Links

Top Cisco defects by risk score

Ready to prevent the next vendor outage?