CVE-2007-5569 — Improper Input Validation in Cisco Adaptive Security Appliance

CWE-20 — Improper Input ValidationCWE-3994 documents4 sources
Severity
7.1HIGHNVD
EPSS
1.3%
top 19.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Adaptive Security ApplianceCisco Adaptive Security Appliance Software
Timeline
PublishedOct 18
Latest updateMay 1

Description

Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a denial of service (device reload) via a crafted TLS packet, aka CSCsg43276 and CSCsh97120.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-fvmv-3fp8-vgjr: Cisco PIX and ASA appliances with 7↗2022-05-01
▶
CVEList
CVE-2007-5569: Cisco PIX and ASA appliances with 7↗2007-10-18
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco PIX and ASA Appliance↗2007-10-17
▶
CVE-2007-5569 — Improper Input Validation in Cisco | cvebase