Login Request a demo
Unscored severity · published Jun 25, 2009
CVE-2009-1203
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it…
–
CVSS
3.8%
EPSS
No
On KEV
Description
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance · Cisco
8.0(4); 8.1.2; 8.2.1 · source: NVD
Affected product
AS
Adaptive Security Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1203
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1203
secunia.com
http://secunia.com/advisories/35511
www.securityfocus.com
http://www.securityfocus.com/archive/1/504516/100/0/threaded
Exploit
http://www.securityfocus.com/bid/35475
www.securitytracker.com
http://www.securitytracker.com/id?1022457
www.vupen.com
http://www.vupen.com/english/advisories/2009/1713
More from Adaptive Security Appliance
8.6
CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability
6.0
CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability
8.6
CVE-2020-27124
Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability
8.6
CVE-2024-20402
A vulnerability in the SSL VPN feature for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated,…
8.6
CVE-2021-34793
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an…