Unscored severity · published Nov 30, 2010
CVE-2010-4354
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000…
–
CVSS
1.6%
EPSS
No
On KEV
Description
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A5
Asa 5500 · Cisco
All versions, or not specified · source: NVD
P5
Pix 500 · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3000 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3005 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3015 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3020 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3030 Concentator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3060 Concentrator · Cisco
All versions, or not specified · source: NVD
V3
Vpn 3080 Concentrator · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4354
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html
More from Asa 5500
–
CVE-2013-0149
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488…
–
CVE-2013-1215
The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID…
–
CVE-2012-6395
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.4 do not properly validate unspecified input related to UNC share pathnames, which allows remote authenticated…
–
CVE-2012-5717
Cisco Adaptive Security Appliances (ASA) devices with firmware 8.x through 8.4(1) do not properly manage SSH sessions, which allows remote authenticated users to cause a denial of…
–
CVE-2011-3304
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.2 before 7.2(5.3), 8.0 before…