ID CVE-2010-0565
Summary Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to cause a denial of service (page fault and device reload) via a malformed DTLS message, aka Bug ID CSCtb64913 and "WebVPN DTLS Denial of Service Vulnerability."
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 17-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 38280
cisco 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
osvdb 62430
sectrack 1023612
secunia 38618
vupen ADV-2010-0415
xf cisco-asa-webvpn-dtls-dos(56339)
Last major update 17-08-2017 - 01:32
Published 19-02-2010 - 17:30
Last modified 17-08-2017 - 01:32
Back to Top