What’s Vulnerable › Vulnerabilities

CVE-2010-4672

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-01-07 · updated 2026-06-16
• Weakness: CWE-399

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (block exhaustion) via EIGRP traffic that triggers an EIGRP multicast storm, aka Bug ID CSCtf20269.

Affected products

• Cisco 5500 Series Adaptive Security Appliance: all versions
• Cisco ASA Software: through 8.2\(3\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+50)
• Cisco Asa 5500: all versions

References

• http://secunia.com/advisories/42931
• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securityfocus.com/bid/45767
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64694
• http://secunia.com/advisories/42931
• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securityfocus.com/bid/45767
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64694

Get alerted when CVE-2010-4672 or the next vulnerability affects your stack