PT-2010-3250 · Cisco · Cisco Pix Security Appliances 500+1

Published 2010-08-04 · Updated 2023-08-11 · CVE-2010-1579

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 through 7.2(4) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.18) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.46) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(1) Cisco PIX Security Appliances 500 series devices (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 7.2, update to version 7.2(5) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.0, update to version 8.0(5.19) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.1, update to version 8.1(2.47) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.2, update to version 8.2(2) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-1579

Affected Products

Cisco Asa

Cisco Pix Security Appliances 500

References · 4

• http://secunia.com/advisories/40842 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100804-asa · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1579 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml · Vendor Advisory