PT-2010-4316 · Cisco · Cisco Firewall Services Module

Publicado 2010-08-06 · Atualizado 2010-08-09 · CVE-2010-2821

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firewall Services Module (FWSM) versions 3.2 before 3.2(17.2) Cisco Firewall Services Module (FWSM) versions 4.0 before 4.0(11.1) Cisco Firewall Services Module (FWSM) versions 4.1 before 4.1(1.2)

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, via crafted traffic over TCP. This can be achieved through (1) Telnet, (2) SSH, or (3) ASDM traffic when multi-mode is enabled.

Recommendations For versions 3.2 before 3.2(17.2), update to version 3.2(17.2) or later. For versions 4.0 before 4.0(11.1), update to version 4.0(11.1) or later. For versions 4.1 before 4.1(1.2), update to version 4.1(1.2) or later.

Correção

Identificadores relacionados

CVE-2010-2821

Produtos afetados

Cisco Firewall Services Module

Referências · 3

• http://cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-2821 · Nota de Segurança
• http://secunia.com/advisories/40843 · Aviso do Fabricante