CVE-2009-1160: Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.0 before 7.0(8)1, 7.1 be...

Security readout for executives and security teams

This issue affects older Cisco ASA 5500 Series and PIX firewall software. The devices may fail to enforce the expected implicit deny rule, allowing some remote packets through despite intended access restrictions. For an organization relying on these appliances for network segmentation, this could undermine firewall policy assumptions. Exposure is limited to environments still running the listed Cisco ASA 5500 Series or PIX Security Appliance software branches before the named fixed versions. Prioritize remediation if these devices still protect critical segments or internet edges. This is an old vulnerability, but the impacted function is core firewall enforcement. Mitigation focus: Identify ASA and PIX appliances still in service.; Compare running versions against the fixed versions named in Cisco guidance.; Upgrade affected 7.0, 7.1, 7.2, or 8.0 releases to fixed or later builds..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.