PT-2010-3251 · Cisco · Cisco Asa+1

CVE-2010-1580 · Publicado 2010-08-04 · Atualizado 2023-08-11

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 through 7.2(4) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.18) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.46) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(1) Cisco PIX Security Appliances 500 series devices (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 through 7.2(4), update to version 7.2(5) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.18), update to version 8.0(5.19) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.46), update to version 8.1(2.47) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(1), update to version 8.2(2) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2010-1580

Produtos afetados

Cisco Asa

Cisco Pix Security Appliances 500 Series

Referências · 4

• http://secunia.com/advisories/40842 · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100804-asa · Aviso do Fabricante
• http://cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-1580 · Nota de Segurança