CVE-2010-0151
The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.99%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.99% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- cisco/firewall services module
- Source
- psirt@cisco.com
References
- http://osvdb.org/62432
- http://secunia.com/advisories/38621Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/38274
- http://www.securitytracker.com/id?1023609
- http://www.vupen.com/english/advisories/2010/0418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56333
- http://osvdb.org/62432
- http://secunia.com/advisories/38621Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/38274
- http://www.securitytracker.com/id?1023609
- http://www.vupen.com/english/advisories/2010/0418
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56333
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.