PT-2010-4309 · Cisco · Cisco Asa+1

Published

2010-08-04

·

Updated

2023-08-11

·

CVE-2010-2814

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.2 before 7.2(5) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 before 8.0(5.15) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 before 8.1(2.44) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 before 8.2(2.17) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.3 before 8.3(1.6) Cisco PIX Security Appliances 500 series devices (affected versions not specified)
Description The issue is related to an unspecified vulnerability in the Transport Layer Security (TLS) implementation, which allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets.
Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 7.2, update to version 7.2(5) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.0, update to version 8.0(5.15) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.1, update to version 8.1(2.44) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.2, update to version 8.2(2.17) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.3, update to version 8.3(1.6) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-2814

Affected Products

Cisco Asa
Cisco Pix Security Appliances 500 Series