VulnerabilityModified
CVE-2010-4681
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.
HIGH 7.5EPSS 2.34%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.34%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.34% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- cisco/adaptive security appliance software · cisco/5500 series adaptive security appliance · cisco/asa 5500
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/42931
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
- http://www.securityfocus.com/bid/45767
- http://www.securitytracker.com/id?1024963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64607
- http://secunia.com/advisories/42931
- http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
- http://www.securityfocus.com/bid/45767
- http://www.securitytracker.com/id?1024963
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64607
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.