CVE-2010-4680 — Cisco Adaptive Security Appliance Software vulnerability

CWE-2643 documents3 sources
Severity
9.0CRITICALNVD
EPSS
0.2%
top 59.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Adaptive Security Appliance Software
Timeline
PublishedJan 7
Latest updateMay 17

Description

The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qr4m-pqcq-h3gw: The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8↗2022-05-17
▶
CVEList
CVE-2010-4680: The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8↗2011-01-07
▶
CVE-2010-4680 — Cisco vulnerability | cvebase