CVE-2010-0568
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.7), 8.1 before 8.1(2.40), and 8.2 before 8.2(2.1); and Cisco PIX 500 Series Security Appliance; allows remote attackers to bypass NTLMv1 authentication via a crafted username, aka Bug ID CSCte21953.
Vulnerabilidad no especificada en Cisco ASA 5500 Series Adaptive Security Appliance v7.0 anterior a v7.0(8.10), v7.2 anterior a v7.2(4.45), v8.0 anterior a v8.0(5.2), 8.1 anterior a v8.1(2.40), y v8.2 anterior a v8.2(2.1), y Cisco PIX 500 Series Security Appliance, permite a atacantes remotos evitar la autenticación a través de un nombre de usuario NTLMv1 manipulado, también conocido como Bug ID CSCte21953.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2010-02-10 CVE Reserved
- 2010-02-19 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/62437 | Vdb Entry | |
| http://www.securityfocus.com/bid/38279 | Vdb Entry | |
| http://www.securitytracker.com/id?1023612 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56342 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/38618 | 2017-08-17 | |
| http://secunia.com/advisories/38636 | 2017-08-17 | |
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml | 2017-08-17 | |
| http://www.vupen.com/english/advisories/2010/0415 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Asa 5500 Search vendor "Cisco" for product "Asa 5500" | 7.1 Search vendor "Cisco" for product "Asa 5500" and version "7.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Asa 5500 Search vendor "Cisco" for product "Asa 5500" | 7.2 Search vendor "Cisco" for product "Asa 5500" and version "7.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Asa 5500 Search vendor "Cisco" for product "Asa 5500" | 8.0 Search vendor "Cisco" for product "Asa 5500" and version "8.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Asa 5500 Search vendor "Cisco" for product "Asa 5500" | 8.1 Search vendor "Cisco" for product "Asa 5500" and version "8.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Asa 5500 Search vendor "Cisco" for product "Asa 5500" | 8.2 Search vendor "Cisco" for product "Asa 5500" and version "8.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Pix 500 Search vendor "Cisco" for product "Pix 500" | * | - |
Affected
| ||||||