CVE-2010-4675

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.

Weaknesses (CWE)

CWE-264

Affected Products (58)

cisco · adaptive_security_appliance_softwarevulnerable

cisco · adaptive_security_appliance_software

References (10)

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

http://www.securityfocus.com/bid/45767

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64601

http://secunia.com/advisories/42931

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf

http://www.securityfocus.com/bid/45767

http://www.securitytracker.com/id?1024963

https://exchange.xforce.ibmcloud.com/vulnerabilities/64601