CVE-2010-4689: High severity Cisco Adaptive Security Appliance Software vulnerability
Published Jan 7, 2011
·Updated
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly preserve ACL behavior after a migration, which allows remote attackers to bypass intended access restrictions via an unspecified type of network traffic that had previously been denied, aka Bug ID CSCte46460.
Affected Software
62 affected components
Cisco Adaptive Security Appliance Software<=8.3\(1\)
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
cisco 5500 Series Adaptive Security Appliance
cisco ASA 5500
Event History
Jan 7, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
11:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4689?
CVE-2010-4689 is considered a medium severity vulnerability that could allow unauthorized access to network resources.
2
How do I fix CVE-2010-4689?
To fix CVE-2010-4689, upgrade to Cisco Adaptive Security Appliance software version 8.3(2) or later.
3
What types of devices are affected by CVE-2010-4689?
CVE-2010-4689 affects Cisco Adaptive Security Appliances, specifically the ASA 5500 series.
4
How does CVE-2010-4689 impact access control lists (ACLs)?
CVE-2010-4689 allows certain types of network traffic to bypass access restrictions due to improper ACL behavior after migration.
5
Was a workaround provided for CVE-2010-4689?
No official workaround for CVE-2010-4689 has been documented, and upgrading the software is recommended.