CVE-2008-2732 — Sensitive Information Exposure in Cisco Adaptive Security Appliance 5500

CWE-200 — Sensitive Information ExposureCWE-3994 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.6%
top 30.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Adaptive Security Appliance 5500Cisco PIX
Timeline
PublishedSep 4
Latest updateMay 1

Description

Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.0 before 7.0(7)16, 7.1 before 7.1(2)71, 7.2 before 7.2(4)7, 8.0 before 8.0(3)20, and 8.1 before 8.1(1)8 allow remote attackers to cause a denial of service (device reload) via unknown vectors, aka Bug IDs CSCsq07867, CSCsq57091, CSCsk60581, and CSCsq39315.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/pix7.2, 8.0, 8.1+2

🔴Vulnerability Details

2
GHSA
GHSA-cggf-9qjh-g2mc: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7↗2022-05-01
▶
CVEList
CVE-2008-2732: Multiple unspecified vulnerabilities in the SIP inspection functionality in Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7↗2008-09-04
▶

📋Vendor Advisories

1
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA↗2008-09-03
▶
CVE-2008-2732 — Sensitive Information Exposure in Cisco | cvebase