CVE-2009-1203 json
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own…
published 2009-06-25 17 y ago modified 2026-06-16 4 mo ago also EUVD-2009-1202
- cvss
- 6.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.8%
- EPSS 3.8% chance of exploitation in 30 days, percentile 90%
- public exploits
- 1
- Exploit-DB
Summary
WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.
Timeline
- First public exploit (EDB-33054)
- Published
Exploit prediction
3.78% chance of exploitation in the next 30 days, higher than 90% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-33054 Cisco Adaptive Security Appliance 8.x - Web VPN FTP or CIFS Authentication Form Phishing remote, 2009-05-24
- securityfocus.com http://www.securityfocus.com/bid/35475 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.0 | AV:N/AC:M/Au:S/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/35475
vdb-entry, exploit
-
securityfocus.com
/archive/1/504516/100/0/threaded
mailing-list
-
securitytracker.com
/id?1022457
vdb-entry
-
vupen.com
/english/advisories/2009/1713
vdb-entry
-
secunia.com
/advisories/35511
third-party-advisory
Sources
- CVE List CVE-2009-1203
- NVD CVE-2009-1203
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.