PT-2011-1625 · Cisco · Cisco Asa+1

Published 2011-01-07 · Updated 2023-08-11 · CVE-2010-4670

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2(3) and earlier Cisco PIX Security Appliances devices (affected versions not specified)

Description The issue concerns the Neighbor Discovery (ND) protocol implementation in the IPv6 stack, allowing remote attackers to cause a denial of service by sending many Router Advertisement (RA) messages with different source addresses. This can lead to CPU consumption and device hang.

Recommendations For Cisco Adaptive Security Appliances (ASA) 5500 series devices versions 8.2(3) and earlier: update to a version later than 8.2(3) to resolve the issue. For Cisco PIX Security Appliances devices: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2010-4670

Affected Products

Cisco Asa

Cisco Pix Security Appliances

References · 9

• 🔥 http://mirror.fem-net.de/CCC/27C3/mp3-audio-only/27c3-3957-en-ipv6_insecurities.mp3 · Exploit
• 🔥 http://youtube.com/watch?v=00yjWB6gGy8 · Exploit
• 🔥 http://events.ccc.de/congress/2010/Fahrplan/events/3957.en.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4670 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64598 · Note
• http://cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf · Note
• http://mirror.fem-net.de/CCC/27C3/mp4-h264-HQ/27c3-3957-en-ipv6_insecurities.mp4 · Note
• http://securitytracker.com/id?1024963 · Note
• http://securityfocus.com/bid/45760 · Note