CVE-2008-2735

CWE-20 — Improper Input ValidationCWE-200 — Information ExposureCWE-3994 documents4 sources
Severity
7.1HIGH
EPSS
0.5%
top 36.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance 5500
Timeline
PublishedSep 4
Latest updateMay 1

Description

The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5, when configured as a clientless SSL VPN endpoint, does not properly process URIs, which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet, aka Bug ID CSCsq19369.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-v57r-q7qp-7jg8: The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8↗2022-05-01
▶
CVEList
CVE-2008-2735: The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8↗2008-09-04
▶

📋Vendor Advisories

1
Cisco
Remote Access VPN and SIP Vulnerabilities in Cisco PIX and Cisco ASA↗2008-09-03
▶