CVE-2010-4675: Critical severity Cisco Adaptive Security Appliance Software vulnerability

Q: What is the severity of CVE-2010-4675?

CVE-2010-4675 has a medium severity level due to allowing authenticated users to bypass access restrictions.

Q: How do I fix CVE-2010-4675?

To fix CVE-2010-4675, upgrade the Cisco Adaptive Security Appliance to a version later than 8.2(3) or apply provided patches.

Q: What versions are affected by CVE-2010-4675?

CVE-2010-4675 affects Cisco ASA 5500 series devices running software versions prior to 8.2(3), including versions in the 7.0 and 8.0 series.

Q: What is the impact of CVE-2010-4675?

The impact of CVE-2010-4675 includes unauthorized access to network equipment via TELNET due to misconfigured security settings.

Q: Who should be concerned about CVE-2010-4675?

Administrators of Cisco Adaptive Security Appliances running vulnerable versions should be concerned about CVE-2010-4675 to prevent potential unauthorized access.

Published Jan 7, 2011

Updated

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.

Affected Software

58 affected components

Cisco Adaptive Security Appliance Software<=8.2\(2\)

Cisco Adaptive Security Appliance Software=7.0

Cisco Adaptive Security Appliance Software=7.0\(0\)

Cisco Adaptive Security Appliance Software=7.0\(2\)

Cisco Adaptive Security Appliance Software=7.0\(4\)

Cisco Adaptive Security Appliance Software=7.0\(5\)

Cisco Adaptive Security Appliance Software=7.0\(5.2\)

Cisco Adaptive Security Appliance Software=7.0\(6.7\)

Cisco Adaptive Security Appliance Software=7.0.1

Cisco Adaptive Security Appliance Software=7.0.1.4

Cisco Adaptive Security Appliance Software=7.0.2

Cisco Adaptive Security Appliance Software=7.0.4

Cisco Adaptive Security Appliance Software=7.0.4.3

Cisco Adaptive Security Appliance Software=7.0.5

Cisco Adaptive Security Appliance Software=7.0.6

Cisco Adaptive Security Appliance Software=7.0.7

Cisco Adaptive Security Appliance Software=7.0.8

Cisco Adaptive Security Appliance Software=7.0.8-interim

Cisco Adaptive Security Appliance Software=7.1

Cisco Adaptive Security Appliance Software=7.1\(2\)

Cisco Adaptive Security Appliance Software=7.1\(2.5\)

Cisco Adaptive Security Appliance Software=7.1\(2.27\)

Cisco Adaptive Security Appliance Software=7.1\(2.48\)

Cisco Adaptive Security Appliance Software=7.1\(2.49\)

Cisco Adaptive Security Appliance Software=7.1\(5\)

Cisco Adaptive Security Appliance Software=7.1.1

Cisco Adaptive Security Appliance Software=7.1.2

Cisco Adaptive Security Appliance Software=7.2

Cisco Adaptive Security Appliance Software=7.2\(1\)

Cisco Adaptive Security Appliance Software=7.2\(1.22\)

Cisco Adaptive Security Appliance Software=7.2\(2\)

Cisco Adaptive Security Appliance Software=7.2\(2.5\)

Cisco Adaptive Security Appliance Software=7.2\(2.7\)

Cisco Adaptive Security Appliance Software=7.2\(2.8\)

Cisco Adaptive Security Appliance Software=7.2\(2.10\)

Cisco Adaptive Security Appliance Software=7.2\(2.14\)

Cisco Adaptive Security Appliance Software=7.2\(2.15\)

Cisco Adaptive Security Appliance Software=7.2\(2.16\)

Cisco Adaptive Security Appliance Software=7.2\(2.17\)

Cisco Adaptive Security Appliance Software=7.2\(2.18\)

Cisco Adaptive Security Appliance Software=7.2\(2.19\)

Cisco Adaptive Security Appliance Software=7.2\(2.48\)

Cisco Adaptive Security Appliance Software=7.2.1

Cisco Adaptive Security Appliance Software=7.2.2

Cisco Adaptive Security Appliance Software=7.2.3

Cisco Adaptive Security Appliance Software=7.2.4

Cisco Adaptive Security Appliance Software=7.2.5

Cisco Adaptive Security Appliance Software=8.0

Cisco Adaptive Security Appliance Software=8.0.2

Cisco Adaptive Security Appliance Software=8.0.3

Cisco Adaptive Security Appliance Software=8.0.4

Cisco Adaptive Security Appliance Software=8.0.5

Cisco Adaptive Security Appliance Software=8.2\(1\)

Cisco Adaptive Security Appliance Software=8.2.1

Cisco Adaptive Security Appliance Software=8.2.2

Cisco Adaptive Security Appliance Software=8.2.2-interim

cisco 5500 Series Adaptive Security Appliance

cisco ASA 5500

Event History

Jan 7, 2011

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

12:00 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4675?

CVE-2010-4675 has a medium severity level due to allowing authenticated users to bypass access restrictions.

How do I fix CVE-2010-4675?

To fix CVE-2010-4675, upgrade the Cisco Adaptive Security Appliance to a version later than 8.2(3) or apply provided patches.

What versions are affected by CVE-2010-4675?

CVE-2010-4675 affects Cisco ASA 5500 series devices running software versions prior to 8.2(3), including versions in the 7.0 and 8.0 series.

What is the impact of CVE-2010-4675?

The impact of CVE-2010-4675 includes unauthorized access to network equipment via TELNET due to misconfigured security settings.

Who should be concerned about CVE-2010-4675?