CVE-2009-1155: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7...

Security readout for executives and security teams

This Cisco ASA/PIX issue could let a remote attacker bypass authentication and open a VPN session, but only in the documented configuration involving AAA override-account-disable under general-attributes. The sources do not show active exploitation or CVSS scoring. Treat exposed VPN appliances in affected versions as a serious access-control risk. Exposure is most likely on legacy Cisco ASA/PIX VPN gateways running affected software and using the named AAA general-attributes configuration. Modern environments are exposed only if these old appliances or software trains remain in service. High priority if legacy Cisco ASA/PIX VPN services remain exposed. Authentication bypass on VPN infrastructure can create direct network access risk, even though current sources do not show active exploitation. Mitigation focus: Upgrade affected ASA/PIX software to Cisco-fixed releases or later per the vendor advisory.; Review VPN general-attributes for AAA override-account-disable usage.; Prioritize remediation for internet-facing VPN appliances..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.