Strix
26.1K

CVE-2010-4354

UnknownEPSS 1.59%

Last modified

CVE-2010-4354 is a vulnerability of currently unknown severity. The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.. EPSS estimates a 1.59% chance of exploitation in the next 30 days.

Description

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.

Metrics

EPSS Probability
1.59%

72.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoAsa 5500All versions
CiscoPix 500All versions
CiscoVpn 3000 ConcentratorAll versions
CiscoVpn 3005 ConcentratorAll versions
CiscoVpn 3015 ConcentratorAll versions
CiscoVpn 3020 ConcentratorAll versions
CiscoVpn 3030 ConcentatorAll versions
CiscoVpn 3060 ConcentratorAll versions
CiscoVpn 3080 ConcentratorAll versions

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-4354?
The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.
How severe is CVE-2010-4354?
Severity scoring for CVE-2010-4354 is pending analysis. The EPSS model estimates a 1.59% probability of exploitation in the next 30 days.
How do I fix CVE-2010-4354?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-4354?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST