Lucene search

K
cve[email protected]CVE-2010-4678
HistoryJan 07, 2011 - 12:00 p.m.

CVE-2010-4678

2011-01-0712:00:50
CWE-264
web.nvd.nist.gov
19
cisco
asa
5500
security appliances
configuration
access restrictions
vulnerability
cve-2010-4678
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.

Affected configurations

NVD
Node
ciscoadaptive_security_appliance_softwareRange8.2\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(0\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(4\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(5.2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0\(6.7\)
OR
ciscoadaptive_security_appliance_softwareMatch7.0.1
OR
ciscoadaptive_security_appliance_softwareMatch7.0.1.4
OR
ciscoadaptive_security_appliance_softwareMatch7.0.2
OR
ciscoadaptive_security_appliance_softwareMatch7.0.4
OR
ciscoadaptive_security_appliance_softwareMatch7.0.4.3
OR
ciscoadaptive_security_appliance_softwareMatch7.0.5
OR
ciscoadaptive_security_appliance_softwareMatch7.0.6
OR
ciscoadaptive_security_appliance_softwareMatch7.0.7
OR
ciscoadaptive_security_appliance_softwareMatch7.0.8
OR
ciscoadaptive_security_appliance_softwareMatch7.0.8interim
OR
ciscoadaptive_security_appliance_softwareMatch7.1
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.27\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.48\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(2.49\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1\(5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.1.1
OR
ciscoadaptive_security_appliance_softwareMatch7.1.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(1.22\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.5\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.7\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.8\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.10\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.14\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.15\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.16\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.17\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.18\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.19\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2\(2.48\)
OR
ciscoadaptive_security_appliance_softwareMatch7.2.1
OR
ciscoadaptive_security_appliance_softwareMatch7.2.2
OR
ciscoadaptive_security_appliance_softwareMatch7.2.3
OR
ciscoadaptive_security_appliance_softwareMatch7.2.4
OR
ciscoadaptive_security_appliance_softwareMatch7.2.5
OR
ciscoadaptive_security_appliance_softwareMatch8.0
OR
ciscoadaptive_security_appliance_softwareMatch8.0.2
OR
ciscoadaptive_security_appliance_softwareMatch8.0.3
OR
ciscoadaptive_security_appliance_softwareMatch8.0.4
OR
ciscoadaptive_security_appliance_softwareMatch8.0.5
OR
ciscoadaptive_security_appliance_softwareMatch8.2\(1\)
OR
ciscoadaptive_security_appliance_softwareMatch8.2.1
OR
ciscoadaptive_security_appliance_softwareMatch8.2.2
OR
ciscoadaptive_security_appliance_softwareMatch8.2.2interim
AND
cisco5500_series_adaptive_security_appliance
OR
ciscoasa_5500

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.4%

Related for CVE-2010-4678