CVE-2009-1160: Medium severity cisco adaptive security appliance 5500 vulnerability

Published Apr 9, 2009

Updated

Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.

Affected Software

9 affected components

cisco Adaptive Security Appliance 5500=7.0

cisco Adaptive Security Appliance 5500=7.1

cisco Adaptive Security Appliance 5500=7.2

cisco Adaptive Security Appliance 5500=8.0

cisco Adaptive Security Appliance 5500=8.1

cisco PIX=7.0

cisco PIX=7.1

cisco PIX=7.2

cisco PIX=8.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml

Event History

Apr 9, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1160?

CVE-2009-1160 is rated as high severity due to its potential to allow remote attackers to bypass security restrictions.

How do I fix CVE-2009-1160?

To fix CVE-2009-1160, upgrade your Cisco Adaptive Security Appliance or PIX Firewall to the latest versions that include the necessary security patches.

Which devices are affected by CVE-2009-1160?

CVE-2009-1160 affects Cisco Adaptive Security Appliances 5500 Series and PIX Security Appliances running versions prior to specified patches.

What impact does CVE-2009-1160 have on security?

CVE-2009-1160 can allow unauthorized access to a network, compromising the security of affected devices and the network they protect.

Is there a workaround for CVE-2009-1160?

While the recommended solution is to update the firmware, temporarily limiting access to vulnerable devices can serve as a workaround until they are patched.