CVE-2010-4692: High severity Cisco Adaptive Security Appliance Software vulnerability
Published Jan 7, 2011
·Updated
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) allows remote attackers to cause a denial of service (device crash) via a large number of LAN-to-LAN (aka L2L) IPsec sessions, aka Bug ID CSCth36592.
Affected Software
62 affected components
Cisco Adaptive Security Appliance Software<=8.3\(1\)
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
cisco 5500 Series Adaptive Security Appliance
cisco ASA 5500
Event History
Jan 7, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
11:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-4692?
CVE-2010-4692 is classified as a high-severity vulnerability due to its ability to cause a denial of service on affected Cisco ASA 5500 devices.
2
How do I fix CVE-2010-4692?
To mitigate CVE-2010-4692, upgrade the Cisco Adaptive Security Appliance software to version 8.3(2) or later.
3
What devices are affected by CVE-2010-4692?
CVE-2010-4692 affects Cisco Adaptive Security Appliances (ASA) 5500 series with software versions prior to 8.3(2) and certain 7.x versions.
4
What types of attacks are possible with CVE-2010-4692?
CVE-2010-4692 allows remote attackers to cause the affected devices to crash by establishing an excessive number of LAN-to-LAN IPsec sessions.
5
Is CVE-2010-4692 still a risk if my Cisco ASA is up to date?
No, if your Cisco ASA is updated to software version 8.3(2) or later, CVE-2010-4692 is no longer a risk.