Vulnerability in Cisco 5500 Series Adaptive Security Appliance
CVE-2010-4689
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460.
EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco 5500_series_adaptive_security_appliance
- Cisco Adaptive_security_appliance_software — versions 7.0, 7.0\(0\), 7.0\(2\)
- Cisco Asa_5500
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)