CVE-2009-1158: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series devices 7.0 before 7.0(8)...

Security readout for executives and security teams

This CVE describes a denial-of-service flaw in older Cisco ASA 5500 firewalls. If H.323 inspection is enabled, a remote attacker could cause the appliance to reload using crafted H.323 traffic. The cited sources indicate availability impact, not data theft or code execution. Exposure is most likely in legacy Cisco ASA 5500 environments still running the listed versions with H.323 inspection enabled. Internet-facing or partner-facing firewalls that process H.323 traffic would carry higher availability risk. Treat this as a legacy firewall availability risk. Prioritize if exposed devices protect VPN, remote access, voice, or critical network paths. It is less urgent where affected ASA versions are retired or H.323 inspection is not enabled. Mitigation focus: Check Cisco's advisory for the fixed ASA software release path.; Upgrade affected ASA versions to a Cisco-supported fixed release.; Disable H.323 inspection if it is unnecessary and Cisco guidance permits it..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.