CVE-2010-0568
published 2010-02-19CVE-2010-0568: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before…
PriorityP337high7.1CVSS 2.0
AVNACMAuNCCINAN
EPSS
2.56%
83.3th percentile
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted username, aka Bug ID CSCte21953.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500 | — | — |
| cisco | asa_5500_series_adaptive_security_appliances | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Cisco ASA 5500 6.6.1164.0 information disclosure (XFDB-56342 / SBV-24918)
vuldb·2026-05-01·CVSS 7.1
CVE-2010-0568 [HIGH] Cisco ASA 5500 6.6.1164.0 information disclosure (XFDB-56342 / SBV-24918)
A vulnerability categorized as problematic has been discovered in Cisco ASA 5500 6.6.1164.0. This affects an unknown function. The manipulation results in information disclosure.
This vulnerability is identified as CVE-2010-0568. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
GHSA
GHSA-rh7w-88h7-qfcv: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7
ghsa_unreviewed·2022-05-02
CVE-2010-0568 [HIGH] GHSA-rh7w-88h7-qfcv: Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted username, aka Bug ID CSCte21953.
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco·2010-02-17·CVSS 7.8
CVE-2010-0149 [HIGH] CWE-287 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the
following vulnerabilities:
TCP Connection Exhaustion Denial of Service Vulnerability
Session Initiation Protocol (SIP) Inspection Denial of Service
Vulnerabilities
Skinny Client Control Protocol (SCCP) Inspection Denial of Service
Vulnerability
WebVPN Datagram Transport Layer Security (DTLS) Denial of Service
Vulnerability
Crafted TCP Segment Denial of Service Vulnerability
Crafted Internet Key Exchange (IKE) Message Denial of Service
Vulnerability
NT LAN Manager version 1 (NTLMv1) Authentication Bypass
Vulnerability
These vulnerabilities are not interdependent; a release that is
affected by one vulnerability is not necessarily affe
Cisco
Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
vendor_cisco
CVE-2010-0568 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
CVE-2010-0568: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances
Cisco ASA 5500 Series Adaptive Security Appliances are affected by the following vulnerabilities: TCP Connection Exhaustion Denial of Service Vulnerability Session Initiation Protocol (SIP) Inspection Denial of Service Vulnerabilities Skinny Client Control Protocol (SCCP) Inspection Denial of Service Vulnerability WebVPN Datagram Transport Layer Security (DTLS) Denial of Service Vulnerability Crafted TCP Segment Denial of Service Vulnerability Crafted Internet Key Exchange (IKE) Message Denial of Service Vulnerability NT LAN Manager version 1 (NTLMv1) Authentication Bypass Vulnerability These vulnerabilities are not interdependent; a release that is affected by one vulnerability is not necessarily
No detection rules found.
No public exploits indexed.
http://osvdb.org/62437http://secunia.com/advisories/38618http://secunia.com/advisories/38636http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.securityfocus.com/bid/38279http://www.securitytracker.com/id?1023612http://www.vupen.com/english/advisories/2010/0415https://exchange.xforce.ibmcloud.com/vulnerabilities/56342http://osvdb.org/62437http://secunia.com/advisories/38618http://secunia.com/advisories/38636http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlhttp://www.securityfocus.com/bid/38279http://www.securitytracker.com/id?1023612http://www.vupen.com/english/advisories/2010/0415https://exchange.xforce.ibmcloud.com/vulnerabilities/56342
2010-02-19
Published