CVE-1999-1582: By design, the "established" command on the Cisco PIX firewall allows connections from one host to arbitrar...

Security readout for executives and security teams

This issue is a Cisco PIX firewall configuration trap, not a typical software bug. The established command can allow broader inbound access than administrators expect when another conduit is already permitted. Business risk comes from unintended exposure of internal services, especially in legacy environments where PIX rules were never revisited. Likely exposure is limited to environments still running Cisco PIX firewalls with configurations using the established command. The affected-product data is marked n/a, so version-specific exposure cannot be confirmed from the bundle. Treat this as a legacy firewall governance issue. Prioritize review if Cisco PIX still protects sensitive networks or internet-facing boundaries. Urgency is lower without exploitation evidence, but unintended access control exposure can carry high business impact. Mitigation focus: Inventory legacy PIX firewalls and rules using the established command.; Review Cisco and CERT guidance before changing firewall behavior.; Assess whether PIX rules permit broader inbound access than intended..

Prepared

Jun 29, 2026, 22:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.