CVE-2010-4675

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.

Related CPE's

ociscoadaptive_security_appliance_software********

ociscoadaptive_security_appliance_software7.0*******

ociscoadaptive_security_appliance_software7.0\(0\)*******

ociscoadaptive_security_appliance_software7.0\(2\)*******

ociscoadaptive_security_appliance_software7.0\(4\)*******

ociscoadaptive_security_appliance_software7.0\(5\)*******

ociscoadaptive_security_appliance_software7.0\(5.2\)*******

ociscoadaptive_security_appliance_software7.0\(6.7\)*******

ociscoadaptive_security_appliance_software7.0.1*******

ociscoadaptive_security_appliance_software7.0.1.4*******

References

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

45767

42931

1024963

asa-telnet-security-bypass(64601)

CvssV3 impact

Could not find any metrics

CvssV2 impact

Version

2.0

VectorString

AV:N/AC:L/Au:S/C:C/I:C/A:C

AccessVector

NETWORK

AccessComplexity

LOW

Authentication

SINGLE

ConfidentialityImpact

COMPLETE

IntegrityImpact

COMPLETE

AvailabilityImpact

COMPLETE

BaseScore

9

Created by Yello
About Severity.io