CVE-2010-0151
published 2010-02-19CVE-2010-0151: The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive…
PriorityP432high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.99%
78.3th percentile
The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asa_5500_series_adaptive_security_appliances | — | — |
| cisco | firewall_services_module | — | — |
| cisco | firewall_services_module | — | — |
| cisco | firewall_services_module | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
vendor_cisco·2010-02-17·CVSS 7.8
CVE-2010-0151 [HIGH] CWE-399 Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability
A vulnerability exists in the Cisco Firewall Services Module (FWSM) for
the Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers that may
cause the Cisco FWSM to reload after processing a malformed Skinny Client
Control Protocol (SCCP) message. The vulnerability exists when SCCP inspection
is enabled.
Cisco has released software updates that address this vulnerability.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100217-fwsm.
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco·2010-02-17·CVSS 7.8
CVE-2010-0149 [HIGH] CWE-287 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the
following vulnerabilities:
TCP Connection Exhaustion Denial of Service Vulnerability
Session Initiation Protocol (SIP) Inspection Denial of Service
Vulnerabilities
Skinny Client Control Protocol (SCCP) Inspection Denial of Service
Vulnerability
WebVPN Datagram Transport Layer Security (DTLS) Denial of Service
Vulnerability
Crafted TCP Segment Denial of Service Vulnerability
Crafted Internet Key Exchange (IKE) Message Denial of Service
Vulnerability
NT LAN Manager version 1 (NTLMv1) Authentication Bypass
Vulnerability
These vulnerabilities are not interdependent; a release that is
affected by one vulnerability is not necessarily affe
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco
CVE-2010-0151 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
CVE-2010-0151: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the following vulnerabilities: TCP Connection Exhaustion Denial of Service Vulnerability Session Initiation Protocol (SIP) Inspection Denial of Service Vulnerabilities Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability WebVPN Datagram Transport Layer Security (DTLS) Denial of Service Vulnerability Crafted TCP Segment Denial of Service Vulnerability Crafted Internet Key Exchange (IKE) Message Denial of Service Vulnerability NT LAN Manager version 1 (NTLMv1) Authentication Bypass Vulnerability These vulnerabilities are not interdependent; a release that is affected by one vulnerability is not necessarily
VulDB
Cisco Firewall Services Module up to 3.2(28) denial of service (XFDB-56333 / SBV-24914)
vuldb·2026-05-01·CVSS 7.8
CVE-2010-0151 [HIGH] Cisco Firewall Services Module up to 3.2(28) denial of service (XFDB-56333 / SBV-24914)
A vulnerability was found in Cisco Firewall Services Module up to 3.2(28) and classified as problematic. This issue affects some unknown processing. Such manipulation leads to denial of service.
This vulnerability is uniquely identified as CVE-2010-0151. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
GHSA
GHSA-m2jr-636c-qqmv: The Cisco Firewall Services Module (FWSM) 4
ghsa_unreviewed·2022-05-02
CVE-2010-0151 [HIGH] GHSA-m2jr-636c-qqmv: The Cisco Firewall Services Module (FWSM) 4
The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/62432http://secunia.com/advisories/38621http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtmlhttp://www.securityfocus.com/bid/38274http://www.securitytracker.com/id?1023609http://www.vupen.com/english/advisories/2010/0418https://exchange.xforce.ibmcloud.com/vulnerabilities/56333http://osvdb.org/62432http://secunia.com/advisories/38621http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtmlhttp://www.securityfocus.com/bid/38274http://www.securitytracker.com/id?1023609http://www.vupen.com/english/advisories/2010/0418https://exchange.xforce.ibmcloud.com/vulnerabilities/56333
2010-02-19
Published