← Back to CVEs

CVE-2010-4680

N/A

Description

The WebVPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permits the viewing of CIFS shares even when CIFS file browsing has been disabled, which allows remote authenticated users to bypass intended access restrictions via CIFS requests, aka Bug ID CSCsz80777.

CVE Details

CVSS v3.1 ScoreN/A

Published1/7/2011

Last Modified4/29/2026

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:5500_series_adaptive_security_appliancecisco:adaptive_security_appliance_softwarecisco:asa_5500

Weaknesses (CWE)

CWE-264

References

http://secunia.com/advisories/42931(cve@mitre.org)

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf(cve@mitre.org)

http://www.securityfocus.com/bid/45767(cve@mitre.org)

http://www.securitytracker.com/id?1024963(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/64606(cve@mitre.org)

http://secunia.com/advisories/42931(af854a3a-2127-422b-91ae-364da2661108)

http://www.cisco.com/en/US/docs/security/asa/asa82/release/notes/asarn82.pdf(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/45767(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1024963(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/64606(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.