CVE-2010-4678 — Cisco Adaptive Security Appliance Software vulnerability

CWE-2643 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 64.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedJan 7
Latest updateMay 17

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-c57q-883q-97fc: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8↗2022-05-17
▶
CVEList
CVE-2010-4678: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8↗2011-01-07
▶
CVE-2010-4678 — Cisco vulnerability | cvebase