CVE-2010-4678

critical

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to pass before the configuration has been loaded, which might allow remote attackers to bypass intended access restrictions by sending network traffic during device startup, aka Bug ID CSCsy86769.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64604

http://www.securitytracker.com/id?1024963

http://www.securityfocus.com/bid/45767

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

http://secunia.com/advisories/42931

Details

Source: Mitre, NVD

Published: 2011-01-07

Updated: 2024-11-21

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Severity: Critical