CVE-2009-3457: Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obt...

Security readout for executives and security teams

This flaw can make older Cisco ACE XML Gateway and ACE Web Application Firewall systems reveal an internal client IP address in an error message. That is not direct system takeover, but it can expose network information useful for reconnaissance. Exposure is limited to organizations still running Cisco AXG or ACE WAF before 6.1 on reachable HTTP-facing paths. The disclosed data is internal addressing, not credentials or code execution. Treat as a moderate legacy perimeter exposure. Prioritize remediation where affected Cisco devices are internet-facing or protect sensitive internal applications. Mitigation focus: Inventory Cisco AXG and ACE WAF deployments and versions.; Upgrade affected systems to 6.1 or later where Cisco guidance applies.; Restrict unauthenticated reachability to affected services until remediated..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.