Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco ASA and PIX may let attackers bypass ACLs

CVE-2008-2059 · published 18 years ago
Summary

Versions of Cisco ASA and PIX security appliances before 8.0(3)9 can be tricked into ignoring their own traffic‑filtering rules, letting outside traffic reach the device that should be blocked. This could allow an attacker to access management functions or move laterally in your network. Upgrade to the latest software release or apply the vendor’s recommended patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco pix_security_appliance 8.0
cpe:2.3:h:cisco:pix_security_appliance:8.0:*:*:*:*:*:*:*
cisco adaptive_security_appliance_software 8.0
cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*
Original advisory text
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors.
Cisco Adaptive Security Appliance (ASA) and Cisco PIX security appliance 8.0.x before 8.0(3)9 allows remote attackers to bypass control-plane ACLs for the device via unknown vectors.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
3% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published4 Jun 2008
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2008-2059 · NVD
Track software like this
Free during beta