7.8

CVE-2010-0149

EPSS 0.77%
Published 19.02.2010 17:30:00
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Asa 5500 Version7.1

Cisco ≫ Asa 5500 Version7.2

Cisco ≫ Asa 5500 Version8.0

Cisco ≫ Asa 5500 Version8.1

Cisco ≫ Asa 5500 Version8.2

Cisco ≫ Pix 500

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.77%	0.724

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:N/I:N/A:C

http://osvdb.org/62433

http://secunia.com/advisories/38618

Vendor Advisory

http://secunia.com/advisories/38636

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml

Vendor Advisory

http://www.securityfocus.com/bid/38275

http://www.securitytracker.com/id?1023612

http://www.vupen.com/english/advisories/2010/0415

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/56336

https://nvd.nist.gov/vuln/detail/CVE-2010-0149

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0149

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0149

EUVD