CVE-2009-1159: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Applianc...

Security readout for executives and security teams

This older Cisco ASA and PIX issue can let a remote attacker crash and reload an affected firewall when SQL*Net inspection is enabled. The business risk is network interruption, not confirmed data theft. Evidence does not show active exploitation in KEV or the provided sources. Exposure is likely limited to legacy Cisco ASA 5500 or PIX appliances running affected software and configured with SQL*Net inspection. Modern environments without these devices, versions, or inspection setting are unlikely to be affected based on the source bundle. Treat this as a legacy infrastructure resilience issue. Prioritize if affected Cisco firewalls protect critical applications or inspect database traffic. It is less urgent where assets are retired, patched, or not using SQL*Net inspection. Mitigation focus: Inventory Cisco ASA 5500 and PIX appliances in the affected software trains.; Upgrade affected devices to Cisco-fixed releases or later per the vendor advisory.; Review whether SQL*Net inspection is enabled and still business-required..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.