Unscored severity · published Apr 9, 2009
CVE-2009-1160
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 before 7.1(2)74, 7.2 before 7.2(4)9, and 8.0 before 8.0(4)5 do not properly implement the implicit deny statement, which might allow remote attackers to successfully send packets that bypass intended access restrictions, aka Bug ID CSCsq91277.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance 5500 · Cisco
7.0; 7.1; 7.2; 8.0; 8.1 · source: NVD
PI
Pix · Cisco
7.0; 7.1; 7.2; 8.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1160
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1160
secunia.com
http://secunia.com/advisories/34607
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/34429
www.securitytracker.com
http://www.securitytracker.com/id?1022017
www.vupen.com
http://www.vupen.com/english/advisories/2009/0981
More from Adaptive Security Appliance 5500
–
CVE-2009-4455
The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend…
–
CVE-2009-1159
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.2 before 7.2(4)26, 8.0 before 8.0(4)22, and 8.1 before 8.1(2)12,…
–
CVE-2009-1158
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and…
–
CVE-2009-1157
Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)30, 8.0 before 8.0(4)28,…
–
CVE-2009-1156
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is…