« Back to list

CVE-2009-1158

Status: ModifiedHigh (7.8)—

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (2)

Cisco — Adaptive Security Appliance 5500Cisco — PIX

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2009-1158",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-04-09T15:08:35.767",
  "references": [
    {
      "url": "http://osvdb.org/53444",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/34607",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/34429",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1022015",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0981",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/53444",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/34607",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a994f6.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/34429",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1022015",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2009/0981",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)6, 7.1 before 7.1(2)82, 7.2 before 7.2(4)26, 8.0 before 8.0(4)24, and 8.1 before 8.1(2)14, when H.323 inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no específica en Cisco Adaptive Security Appliances (ASA) 5500 Series dispositivos v7.0 anteriores a v7.0(8)6, v7.1 anteriores a v7.1(2)82, v7.2 anteriores a v7.2(4)26, v8.0 anteriores a v8.0(4)24, y v8.1 anteriores a v8.1(2)14, cuando la inspección H.323 está habilitado, permite a atacantes remotos provocar una denegación de servicio (recarga de dispositivo) a través de un paquete h.323 manipulado."
    }
  ],
  "lastModified": "2026-06-16T23:06:37.763",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "235C2CE5-C858-4037-AE35-E6D506301894"
            },
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76EAF7E0-6C0A-4B62-8776-CDE7CEB4565A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97290344-5440-4797-9668-AA1050E87C41"
            },
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1AB1C21E-6A68-4851-BCFC-12E8E5BE9610"
            },
            {
              "criteria": "cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FC14168-91A7-4D42-9CEA-09AAA3BBE2B6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "508DECFB-F334-409F-911B-BF8D842D3556"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4991BC7-B07D-4D8C-885C-136AD9D4E209"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85B161D0-D78B-4517-88AC-3A110F13C154"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35649F68-BD09-4684-925D-620D99B42CE8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E32C602C-E278-4DA2-B7D0-941FABA9ADC0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}