CVE-2008-2733
highpriority · track · 29OT risk · elevatedEPSS 0.032 · 88 %ileEUUSEPSS · scored 2026-10-28
Cisco PIX and Adaptive Security Appliance (ASA) 5500 devices 7.2 before 7.2(4)2, 8.0 before 8.0(3)14, and 8.1 before 8.1(1)4, when configured as a client VPN endpoint, do not properly process IPSec client authentication, which allows remote attackers to cause a denial of service (device reload) via a crafted authentication attempt, aka Bug ID CSCso69942.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6–7.1
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (7)
Products and version ranges known to be affected.
- cisco adaptive security appliance 5500= 7.2nvdUScpe:2.3:h:cisco:adaptive_security_appliance_5500:*:*:*:*:*:*:*:*
- cisco adaptive security appliance 5500= 8.0nvdUScpe:2.3:h:cisco:adaptive_security_appliance_5500:*:*:*:*:*:*:*:*
- cisco adaptive security appliance 5500= 8.1nvdUScpe:2.3:h:cisco:adaptive_security_appliance_5500:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (14)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/31730enisa_euvd
- http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080903-asaenisa_euvd
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809f138a.shtmlenisa_euvd
- http://www.securityfocus.com/bid/30998enisa_euvd
- http://www.securitytracker.com/id?1020810enisa_euvd
- http://www.securitytracker.com/id?1020811enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44867enisa_euvd
- http://secunia.com/advisories/31730nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan