Access Control Bypass in Cisco ASA 5500 Series Devices

CVE-2010-4689

Summary

Cisco Adaptive Security Appliances (ASA) 5500 series devices prior to version 8.3(2) exhibit vulnerabilities related to access control lists (ACLs) that fail to maintain their intended behavior after software migration. This oversight can permit unauthorized remote access by allowing previously denied network traffic to bypass restrictions, enabling potential exploitation by malicious actors. It is crucial for organizations utilizing affected devices to apply updates to mitigate risks associated with this vulnerability.

References