CVE-2009-4912: Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) complete an SSL ha...

Security readout for executives and security teams

Some Cisco ASA 5580 firewalls could complete an HTTPS SSL handshake with an unauthorized client, potentially bypassing intended access restrictions. Business risk depends on whether affected ASA 5580 HTTPS services are reachable by untrusted users. The provided sources do not include CVSS scoring or evidence of active exploitation. Exposure is limited to Cisco ASA 5580 series appliances with software earlier than 8.1(2), especially where HTTPS access is reachable from untrusted networks. The bundle does not identify other ASA models or products as affected. Treat as a targeted legacy firewall exposure review, not an emergency based on available evidence. Prioritize if ASA 5580 management HTTPS is exposed beyond trusted administrators or if older software remains in production. Mitigation focus: Inventory Cisco ASA 5580 appliances and record ASA software versions.; Prioritize remediation for ASA 5580 devices running software before 8.1(2).; Review Cisco ASA 8.1(2) release notes and current Cisco guidance..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.