CVE-2010-2814: High severity cisco adaptive security appliance software vulnerability

Published Aug 6, 2010

Updated

Unspecified vulnerability in the Transport Layer Security (TLS) implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.15), 8.1 before 8.1(2.44), 8.2 before 8.2(2.17), and 8.3 before 8.3(1.6) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via a sequence of crafted TLS packets, aka Bug ID CSCtf37506.

Affected Software

42 affected components

Cisco Adaptive Security Appliance=7.2\(3\)

Cisco Adaptive Security Appliance=7.2\(4\)

Cisco Adaptive Security Appliance=7.2\(5\)

Cisco Adaptive Security Appliance=8.0\(2\)

Cisco Adaptive Security Appliance=8.0\(3\)

Cisco Adaptive Security Appliance=8.0\(4\)

Cisco Adaptive Security Appliance=8.0\(5\)

Cisco Adaptive Security Appliance=8.1\(1\)

Cisco Adaptive Security Appliance=8.1\(2\)

Cisco Adaptive Security Appliance=8.2

Cisco Adaptive Security Appliance=8.2\(1\)

Cisco Adaptive Security Appliance=8.2\(2\)

Cisco Adaptive Security Appliance=8.3

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.5\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=7.2\(2.48\)

Cisco Adaptive Security Appliance Software=8.0

Cisco ASA 5500

Cisco Asa 5505

Cisco Asa 5510

Cisco Asa 5520

Cisco Asa 5540

Cisco Asa 5550

Cisco Asa 5580

Cisco PIX 500

Cisco Pix 501

Cisco Pix 506e

Cisco Pix Firewall 506

Cisco PIX Firewall 515

Cisco Pix Firewall 520

Cisco Pix Firewall 525

Cisco Pix Firewall 535

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml

Event History

Aug 6, 2010

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

Description

Aug 9, 2010

Data Sourced

11:58 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2814?

The severity of CVE-2010-2814 is classified as high due to potential exploitation leading to unauthorized access.

How do I fix CVE-2010-2814?

To fix CVE-2010-2814, upgrade Cisco Adaptive Security Appliance software to versions 7.2(5), 8.0(5.15), 8.1(2.44), 8.2(2.17), or 8.3(1.6) or later.

Which devices are affected by CVE-2010-2814?

CVE-2010-2814 affects Cisco Adaptive Security Appliances (ASA) 5500 series and Cisco PIX Security Appliances running certain earlier software versions.

What are the potential impacts of CVE-2010-2814?

The impacts of CVE-2010-2814 may include unauthorized disclosure of sensitive information and potential loss of confidentiality.

Is CVE-2010-2814 actively being exploited?

There is no known active exploitation of CVE-2010-2814 reported at this time.