Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco ASA 5580 devices can crash from crafted packets

CVE-2009-4918 · published 16 years ago
Summary

Cisco ASA 5580 firewalls running firmware older than version 8.1(2) can be forced to stop handling VPN connections when they receive specially malformed network packets. This causes the VPN process to hang, effectively denying service to users. Upgrade the devices to the latest firmware or apply the provided patch to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco asa_5580 <= 8.1\(1\)
cpe:2.3:h:cisco:asa_5580:*:*:*:*:*:*:*:*
Original advisory text
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ...
Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allow remote attackers to cause a denial of service (IKE process hang) via malformed NAT-T packets, aka Bug ID CSCsr74439.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
1% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published29 Jun 2010
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2009-4918 · NVD
Track software like this
Free during beta