{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:24:04Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20101203-CVE-2010-4354","slug":"cisco-sa-20101203-cve-2010-4354","vendor":"Cisco","title":"Cisco IPsec VPN Implementation Group Name Enumeration Information Disclosure Vulnerability","summary":"Multiple Cisco VPN devices contain a vulnerability that could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability exists due to unsafe handling of error response codes.  An unauthenticated, remote attacker could exploit this vulnerability by sending malicious requests to the targeted device.  If successful, the attacker could determine the existence of VPN group names in use on the device. Cisco has confirmed the vulnerability in a security response and released software updates. Because the affected devices typically accept unsolicited connections from untrusted networks, an attacker could easily target a vulnerable system.  If an exploit is successful, the attacker could gain access to sensitive information about the device that could aid the attacker in further exploits. Administrators should note that Cisco PIX 500 Series devices and Cisco VPN 300 Series Concentrators have reached end of life.  As a result, no software updates will be issued for these products.","severity":"Medium","published_at":"2010-12-03T20:24:31Z","updated_at":"2010-12-03T20:24:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354/csaf/Cisco-SA-20101203-CVE-2010-4354.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":3,"public_evidence_count":3,"kev_count":0,"highest_epss":0.01588},"cves":[{"id":"CVE-2010-4354","kev":false,"epss":{"score":0.01588,"percentile":0.72926,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"cve":{"id":"CVE-2010-4354"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:59Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"8.0.1.2; 8.0.2; 8.0.2.11; 8.0.3; 8.0.4; 8.0.4.25; 8.0.4.28; 8.0.4.32; 8.0.4.33; 8.0.5; 8.1.1; 8.1.2; 8.1.2.15; 8.1.2.16; 8.1.2.19; 8.1.2.23; 8.1.2.24; 8.2.0.45; 8.2.1; 8.2.2; 8.2.2.10; 8.3.1; 8.3.1.1","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01588,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-12-03T20:24:31Z","updated_at":"2010-12-03T20:24:31Z","advisory_updated_at":"2010-12-03T20:24:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354","row_display_order":1},{"product":{"name":"Cisco PIX/ASA","slug":"cisco-pix-asa","vendor":"Cisco"},"cve":{"id":"CVE-2010-4354"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:59Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco PIX/ASA","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01588,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-12-03T20:24:31Z","updated_at":"2010-12-03T20:24:31Z","advisory_updated_at":"2010-12-03T20:24:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354","row_display_order":2},{"product":{"name":"Cisco VPN 3000 Series Concentrator","slug":"cisco-vpn-3000-series-concentrator","vendor":"Cisco"},"cve":{"id":"CVE-2010-4354"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:59Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco VPN 3000 Series Concentrator","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01588,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-12-03T20:24:31Z","updated_at":"2010-12-03T20:24:31Z","advisory_updated_at":"2010-12-03T20:24:31Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20101203-CVE-2010-4354","row_display_order":3}]}