PT-2010-4312 · Cisco · Cisco Asa+1

Published

2010-08-04

·

Updated

2023-08-11

·

CVE-2010-2817

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.0 through 7.0(8.10) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 through 7.2(4) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.0 through 8.0(5.14) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.1 through 8.1(2.43) Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2 through 8.2(2.9) Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.3(1.0) Cisco PIX Security Appliances 500 series devices (affected versions not specified)
Description The issue allows remote attackers to cause a denial of service (device reload) via a crafted IKE message.
Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 7.0, update to version 7.0(8.11) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 7.1 and 7.2, update to version 7.2(5) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.0, update to version 8.0(5.15) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.1, update to version 8.1(2.44) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.2, update to version 8.2(2.10) or later. For Cisco Adaptive Security Appliances (ASA) 5500 series devices version 8.3, update to version 8.3(1.1) or later. For Cisco PIX Security Appliances 500 series devices, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2010-2817

Affected Products

Cisco Asa
Cisco Pix Security Appliances 500 Series