ID CVE-2010-0566
Summary Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10) allows remote attackers to cause a denial of service (device reload) via a malformed TCP segment when certain NAT translation and Cisco AIP-SSM configurations are used, aka Bug ID CSCtb37219.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*
CVSS
Base: 7.1 (as of 17-08-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:C
refmap via4
bid 38278
cisco 20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
osvdb 62431
sectrack 1023612
secunia 38618
vupen ADV-2010-0415
xf cisco-asa-nat-aipssm-dos(56340)
Last major update 17-08-2017 - 01:32
Published 19-02-2010 - 17:30
Last modified 17-08-2017 - 01:32
Back to Top