7.8
CVE-2009-1155
- EPSS 0.86%
- Published 09.04.2009 15:08:35
- Last modified 09.04.2025 00:30:58
- Source psirt@cisco.com
- Teams watchlist Login
- Open Login
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance 5500 Version7.1
Cisco ≫ Adaptive Security Appliance 5500 Version7.2
Cisco ≫ Adaptive Security Appliance 5500 Version8.0
Cisco ≫ Adaptive Security Appliance 5500 Version8.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.86% | 0.73 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:C/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.