CVE-2010-2816: High severity cisco adaptive security appliance software vulnerability

Published Aug 6, 2010

Updated

Unspecified vulnerability in the SIP inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.17), 8.1 before 8.1(2.45), and 8.2 before 8.2(2.13) allows remote attackers to cause a denial of service (device reload) via crafted SIP packets, aka Bug ID CSCtd32106.

Affected Software

25 affected components

Cisco Adaptive Security Appliance=8.0\(2\)

Cisco Adaptive Security Appliance=8.0\(3\)

Cisco Adaptive Security Appliance=8.0\(4\)

Cisco Adaptive Security Appliance=8.0\(5\)

Cisco Adaptive Security Appliance=8.1\(1\)

Cisco Adaptive Security Appliance=8.1\(2\)

Cisco Adaptive Security Appliance=8.2

Cisco Adaptive Security Appliance=8.2\(1\)

Cisco Adaptive Security Appliance=8.2\(2\)

Cisco Adaptive Security Appliance Software=8.0

Cisco ASA 5500

Cisco Asa 5505

Cisco Asa 5510

Cisco Asa 5520

Cisco Asa 5540

Cisco Asa 5550

Cisco Asa 5580

Cisco PIX 500

Cisco Pix 501

Cisco Pix 506e

Cisco Pix Firewall 506

Cisco PIX Firewall 515

Cisco Pix Firewall 520

Cisco Pix Firewall 525

Cisco Pix Firewall 535

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f12f.shtml

Event History

Aug 6, 2010

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

Description

Aug 9, 2010

Data Sourced

11:58 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2816?

CVE-2010-2816 has a CVSS base score of 7.2, indicating high severity due to the potential for a denial of service.

How do I fix CVE-2010-2816?

To fix CVE-2010-2816, upgrade the Cisco Adaptive Security Appliance software to versions 8.0(5.17), 8.1(2.45), or 8.2(2.13) or later.

Who is impacted by CVE-2010-2816?

CVE-2010-2816 impacts users of Cisco Adaptive Security Appliances 5500 series devices running vulnerable versions of the software.

What types of attacks exploit CVE-2010-2816?

CVE-2010-2816 can be exploited by attackers sending crafted SIP packets that cause device reloads, leading to denial of service.

What are the affected software versions for CVE-2010-2816?

Affected software versions for CVE-2010-2816 include Cisco ASA versions 8.0 prior to 8.0(5.17), 8.1 prior to 8.1(2.45), and 8.2 prior to 8.2(2.13).