What’s Vulnerable › Vulnerabilities

CVE-2009-5037

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-01-07 · updated 2026-06-16
• Weakness: CWE-399

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM syslog outage) via a long URL, aka Bug IDs CSCsm11264 and CSCtb92911.

Affected products

• Cisco 5500 Series Adaptive Security Appliance: all versions
• Cisco ASA Software: through 8.2\(2\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+49)
• Cisco Asa 5500: all versions

References

• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64732
• https://supportforums.cisco.com/thread/2018112
• https://supportforums.cisco.com/thread/238724
• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64732
• https://supportforums.cisco.com/thread/2018112
• https://supportforums.cisco.com/thread/238724

Get alerted when CVE-2009-5037 or the next vulnerability affects your stack