CVE-2010-0565

2010-02-1917:30:00

[email protected]

web.nvd.nist.gov

cve-2010-0565

cisco

asa 5500 series

adaptive security appliance

denial of service

vulnerability

dtls

webvpn

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.7 Medium

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.3%

JSON

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to cause a denial of service (page fault and device reload) via a malformed DTLS message, aka Bug ID CSCtb64913 and “WebVPN DTLS Denial of Service Vulnerability.”

Affected configurations

NVD

Node

ciscoasa_5500Match7.1

ciscoasa_5500Match7.2

ciscoasa_5500Match8.0

ciscoasa_5500Match8.1

ciscoasa_5500Match8.2

ciscopix_500

CPENameOperatorVersion
cisco:asa_5500cisco asa 5500eq7.1
cisco:asa_5500cisco asa 5500eq7.2
cisco:asa_5500cisco asa 5500eq8.0
cisco:asa_5500cisco asa 5500eq8.1
cisco:asa_5500cisco asa 5500eq8.2
cisco:pix_500cisco pix 500eq*

CPE	Name	Operator	Version
cisco:asa_5500	cisco asa 5500	eq	7.1
cisco:asa_5500	cisco asa 5500	eq	7.2
cisco:asa_5500	cisco asa 5500	eq	8.0
cisco:asa_5500	cisco asa 5500	eq	8.1
cisco:asa_5500	cisco asa 5500	eq	8.2
cisco:pix_500	cisco pix 500	eq	*