CVE-2010-4675

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-07 · updated 2026-06-16
Weakness: CWE-264

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which TELNET connections should be permitted, which allows remote authenticated users to bypass intended access restrictions via vectors involving the "lowest security level interface," aka Bug ID CSCsv40504.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: through 8.2\(2\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+49)
Cisco Asa 5500: all versions

References

http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
http://www.securityfocus.com/bid/45767
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64601
http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
http://www.securityfocus.com/bid/45767
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64601

Get alerted when CVE-2010-4675 or the next vulnerability affects your stack