First published: Fri Jan 07 2011(Updated: )
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Adaptive Security Appliance Software | <=8.2\(2\) | |
Cisco Adaptive Security Appliance Software | =7.0 | |
Cisco Adaptive Security Appliance Software | =7.0\(0\) | |
Cisco Adaptive Security Appliance Software | =7.0\(2\) | |
Cisco Adaptive Security Appliance Software | =7.0\(4\) | |
Cisco Adaptive Security Appliance Software | =7.0\(5\) | |
Cisco Adaptive Security Appliance Software | =7.0\(5.2\) | |
Cisco Adaptive Security Appliance Software | =7.0\(6.7\) | |
Cisco Adaptive Security Appliance Software | =7.0.1 | |
Cisco Adaptive Security Appliance Software | =7.0.1.4 | |
Cisco Adaptive Security Appliance Software | =7.0.2 | |
Cisco Adaptive Security Appliance Software | =7.0.4 | |
Cisco Adaptive Security Appliance Software | =7.0.4.3 | |
Cisco Adaptive Security Appliance Software | =7.0.5 | |
Cisco Adaptive Security Appliance Software | =7.0.6 | |
Cisco Adaptive Security Appliance Software | =7.0.7 | |
Cisco Adaptive Security Appliance Software | =7.0.8 | |
Cisco Adaptive Security Appliance Software | =7.0.8-interim | |
Cisco Adaptive Security Appliance Software | =7.1 | |
Cisco Adaptive Security Appliance Software | =7.1\(2\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.5\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.27\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.48\) | |
Cisco Adaptive Security Appliance Software | =7.1\(2.49\) | |
Cisco Adaptive Security Appliance Software | =7.1\(5\) | |
Cisco Adaptive Security Appliance Software | =7.1.1 | |
Cisco Adaptive Security Appliance Software | =7.1.2 | |
Cisco Adaptive Security Appliance Software | =7.2 | |
Cisco Adaptive Security Appliance Software | =7.2\(1\) | |
Cisco Adaptive Security Appliance Software | =7.2\(1.22\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.5\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.7\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.8\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.10\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.14\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.15\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.16\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.17\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.18\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.19\) | |
Cisco Adaptive Security Appliance Software | =7.2\(2.48\) | |
Cisco Adaptive Security Appliance Software | =7.2.1 | |
Cisco Adaptive Security Appliance Software | =7.2.2 | |
Cisco Adaptive Security Appliance Software | =7.2.3 | |
Cisco Adaptive Security Appliance Software | =7.2.4 | |
Cisco Adaptive Security Appliance Software | =7.2.5 | |
Cisco Adaptive Security Appliance Software | =8.0 | |
Cisco Adaptive Security Appliance Software | =8.0.2 | |
Cisco Adaptive Security Appliance Software | =8.0.3 | |
Cisco Adaptive Security Appliance Software | =8.0.4 | |
Cisco Adaptive Security Appliance Software | =8.0.5 | |
Cisco Adaptive Security Appliance Software | =8.2\(1\) | |
Cisco Adaptive Security Appliance Software | =8.2.1 | |
Cisco Adaptive Security Appliance Software | =8.2.2 | |
Cisco Adaptive Security Appliance Software | =8.2.2-interim | |
Cisco Adaptive Security Appliance 5500 | ||
Cisco ASA 5500 CSC-SSM |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-4678 is considered a medium severity vulnerability.
To fix CVE-2010-4678, upgrade your Cisco ASA software to version 8.2(3) or later.
CVE-2010-4678 affects Cisco Adaptive Security Appliances (ASA) 5500 series devices running software versions prior to 8.2(3) or any 7.0 versions.
CVE-2010-4678 could allow remote attackers to bypass intended access restrictions during the startup of the device.
Yes, CVE-2010-4678 is exploitable remotely as it allows attackers to send network traffic during device startup.