CVE-2009-1156

Severity: medium (CVSS 5.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-04-09 · updated 2026-06-16

Description

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 8.0 before 8.0(4)25 and 8.1 before 8.1(2)15, when an SSL VPN or ASDM access is configured, allows remote attackers to cause a denial of service (device reload) via a crafted (1) SSL or (2) HTTP packet.

Affected products

Cisco Adaptive Security Appliance 5500: 8.0, 8.1
Cisco Pix: 8.0, 8.1

References

http://osvdb.org/53442
http://secunia.com/advisories/34607
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml
http://www.securityfocus.com/bid/34429
http://www.securitytracker.com/id?1022015
http://www.vupen.com/english/advisories/2009/0981
http://osvdb.org/53442
http://secunia.com/advisories/34607
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml
http://www.securityfocus.com/bid/34429
http://www.securitytracker.com/id?1022015
http://www.vupen.com/english/advisories/2009/0981

Get alerted when CVE-2009-1156 or the next vulnerability affects your stack