What’s Vulnerable › Vulnerabilities

CVE-2010-4682

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-01-07 · updated 2026-06-16
• Weakness: CWE-399

Description

Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (memory consumption) by making multiple incorrect LDAP authentication attempts, aka Bug ID CSCtf29867.

Affected products

• Cisco 5500 Series Adaptive Security Appliance: all versions
• Cisco ASA Software: through 8.2\(2\); 7.0, 7.0(0), 7.0(2), 7.0(4), 7.0(5), 7.0(5.2) (+49)
• Cisco Asa 5500: all versions

References

• http://secunia.com/advisories/42931
• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securityfocus.com/bid/45767
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64608
• http://secunia.com/advisories/42931
• http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf
• http://www.securityfocus.com/bid/45767
• http://www.securitytracker.com/id?1024963
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64608

Get alerted when CVE-2010-4682 or the next vulnerability affects your stack