CVE-2010-0149
published 2010-02-19CVE-2010-0149: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
4.08%
89.6th percentile
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500_series_adaptive_security_appliances | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco PIX 500 up to 7.1 denial of service (XFDB-56336 / SBV-24911)
vuldb·2026-05-01·CVSS 7.8
CVE-2010-0149 [HIGH] Cisco PIX 500 up to 7.1 denial of service (XFDB-56336 / SBV-24911)
A vulnerability, which was classified as problematic, was found in Cisco PIX 500 up to 7.1. This affects an unknown part. The manipulation results in denial of service.
This vulnerability is known as CVE-2010-0149. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
GHSA
GHSA-p9qf-76h3-fg7r: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7
ghsa_unreviewed·2022-05-02
CVE-2010-0149 [HIGH] GHSA-p9qf-76h3-fg7r: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco·2010-02-17·CVSS 7.8
CVE-2010-0149 [HIGH] CWE-287 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the
following vulnerabilities:
TCP Connection Exhaustion Denial of Service Vulnerability
Session Initiation Protocol (SIP) Inspection Denial of Service
Vulnerabilities
Skinny Client Control Protocol (SCCP) Inspection Denial of Service
Vulnerability
WebVPN Datagram Transport Layer Security (DTLS) Denial of Service
Vulnerability
Crafted TCP Segment Denial of Service Vulnerability
Crafted Internet Key Exchange (IKE) Message Denial of Service
Vulnerability
NT LAN Manager version 1 (NTLMv1) Authentication Bypass
Vulnerability
These vulnerabilities are not interdependent; a release that is
affected by one vulnerability is not necessarily affe
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco
CVE-2010-0149 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
CVE-2010-0149: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the following vulnerabilities: TCP Connection Exhaustion Denial of Service Vulnerability Session Initiation Protocol (SIP) Inspection Denial of Service Vulnerabilities Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability WebVPN Datagram Transport Layer Security (DTLS) Denial of Service Vulnerability Crafted TCP Segment Denial of Service Vulnerability Crafted Internet Key Exchange (IKE) Message Denial of Service Vulnerability NT LAN Manager version 1 (NTLMv1) Authentication Bypass Vulnerability These vulnerabilities are not interdependent; a release that is affected by one vulnerability is not necessarily
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/62433http://secunia.com/advisories/38618http://secunia.com/advisories/38636http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.securityfocus.com/bid/38275http://www.securitytracker.com/id?1023612http://www.vupen.com/english/advisories/2010/0415https://exchange.xforce.ibmcloud.com/vulnerabilities/56336http://osvdb.org/62433http://secunia.com/advisories/38618http://secunia.com/advisories/38636http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.securityfocus.com/bid/38275http://www.securitytracker.com/id?1023612http://www.vupen.com/english/advisories/2010/0415https://exchange.xforce.ibmcloud.com/vulnerabilities/56336
2010-02-19
Published