CVE-2009-1156: Medium severity cisco adaptive security appliance 5500 vulnerability

Published Apr 9, 2009

Updated

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet.

Affected Software

4 affected components

cisco Adaptive Security Appliance 5500=8.0

cisco Adaptive Security Appliance 5500=8.1

cisco PIX=8.0

cisco PIX=8.1

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1156?

CVE-2009-1156 is classified as a high severity vulnerability due to its potential to cause a denial of service on affected Cisco devices.

How do I fix CVE-2009-1156?

To fix CVE-2009-1156, you should upgrade the affected Cisco Adaptive Security Appliances to version 8.0(4)25 or 8.1(2)15 or later.

Which devices are affected by CVE-2009-1156?

CVE-2009-1156 affects Cisco Adaptive Security Appliances 5500 Series devices and Cisco PIX Firewalls running specific versions of the software.

What type of attacks can exploit CVE-2009-1156?

CVE-2009-1156 can be exploited via crafted SSL or HTTP packets sent by remote attackers, leading to device reloads.

Is there a workaround for CVE-2009-1156?

Cisco has not provided specific workarounds for CVE-2009-1156, and the recommended action is to apply the software updates to mitigate the vulnerability.