CVE-2010-4680

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-07 · updated 2026-06-16
Weakness: CWE-264

Description

The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: through 8.2\(2\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+49)
Cisco Asa 5500: all versions

References

http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
http://www.securityfocus.com/bid/45767
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64606
http://secunia.com/advisories/42931
http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
http://www.securityfocus.com/bid/45767
http://www.securitytracker.com/id?1024963
https://exchange.xforce.ibmcloud.com/vulnerabilities/64606

Get alerted when CVE-2010-4680 or the next vulnerability affects your stack