{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:02:30Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20090408-asa","slug":"cisco-sa-20090408-asa","vendor":"Cisco","title":"Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances","summary":"Multiple vulnerabilities exist in the Cisco ASA 5500 Series Adaptive Security Appliances and Cisco PIX Security Appliances. This security advisory outlines the details of these vulnerabilities: VPN Authentication Bypass when Account Override Feature is Used vulnerability Crafted HTTP packet denial of service (DoS) vulnerability Crafted TCP Packet DoS vulnerability Crafted H.323 packet DoS vulnerability SQL*Net packet DoS vulnerability Access control list (ACL) bypass vulnerability Workarounds are available for some of the vulnerabilities. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa.","severity":"High","published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20090408-asa/csaf/cisco-sa-20090408-asa.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":6,"visible_product_count":2,"public_evidence_count":11,"kev_count":0,"highest_epss":0.0266},"cves":[{"id":"CVE-2009-1157","kev":false,"epss":{"score":0.0266,"percentile":0.84006,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"}},{"id":"CVE-2009-1159","kev":false,"epss":{"score":0.01916,"percentile":0.77559,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"}},{"id":"CVE-2009-1158","kev":false,"epss":{"score":0.01916,"percentile":0.77558,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"}},{"id":"CVE-2009-1155","kev":false,"epss":{"score":0.0188,"percentile":0.77125,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"}},{"id":"CVE-2009-1160","kev":false,"epss":{"score":0.0114,"percentile":0.63032,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"}},{"id":"CVE-2009-1156","kev":false}],"public_evidence":[{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1157"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; 7.0.5; 7.0.6; 7.0.7; 7.0.7.1; 7.0.8; 7.1.2; 7.1.2.61; 7.2.1; 7.2.2; 7.2.2.34; 7.2.3; 7.2.3.1; 7.2.4; 7.2.4.27; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.0.4.25; 8.1.1; 8.1.2; 8.1.2.15; 8.1.2.16","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0266,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":1},{"product":{"name":"Cisco PIX Security Appliance Software","slug":"cisco-pix-security-appliance-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1157"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX Security Appliance Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0266,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":2},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1159"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.2.1; 7.2.2; 7.2.2.34; 7.2.3; 7.2.3.1; 7.2.4; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.1.1; 8.1.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":3},{"product":{"name":"Cisco PIX Security Appliance Software","slug":"cisco-pix-security-appliance-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1159"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX Security Appliance Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":4},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1158"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; 7.0.5; 7.0.6; 7.0.7; 7.0.7.1; 7.0.8; 7.1.2; 7.1.2.61; 7.1.2.81; 7.2.1; 7.2.2; 7.2.2.34; 7.2.3; 7.2.3.1; 7.2.4; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.1.1; 8.1.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":5},{"product":{"name":"Cisco PIX Security Appliance Software","slug":"cisco-pix-security-appliance-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1158"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX Security Appliance Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01916,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":6},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1155"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.1.2; 7.1.2.61; 7.1.2.81; 7.2.1; 7.2.2; 7.2.2.34; 7.2.3; 7.2.3.1; 7.2.4; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.1.1; 8.1.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0188,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":7},{"product":{"name":"Cisco PIX Security Appliance Software","slug":"cisco-pix-security-appliance-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1155"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX Security Appliance Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0188,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":8},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1160"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"7.0.1; 7.0.1.4; 7.0.2; 7.0.3; 7.0.4; 7.0.4.2; 7.0.5; 7.0.6; 7.0.7; 7.0.7.1; 7.0.8; 7.1.2; 7.1.2.61; 7.2.1; 7.2.2; 7.2.2.34; 7.2.3; 7.2.3.1; 7.2.4; 8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0114,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":9},{"product":{"name":"Cisco PIX Security Appliance Software","slug":"cisco-pix-security-appliance-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1160"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX Security Appliance Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.0114,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:46Z"},"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":10},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2009-1156"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:52Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.0.4.25; 8.1.1; 8.1.2","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"published_at":"2009-04-08T16:00:00Z","updated_at":"2009-04-08T16:00:00Z","advisory_updated_at":"2009-04-08T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090408-asa","row_display_order":11}]}