CVE-2009-4922: Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software bef...

Security readout for executives and security teams

CVE-2009-4922 affects Cisco ASA 5580 firewalls running software before 8.1(2). An authenticated remote IPsec site-to-site peer could trigger a denial of service condition, causing a traceback. For exposed legacy ASA 5580 deployments, the business risk is firewall instability affecting VPN connectivity and network security enforcement. Exposure appears limited to Cisco ASA 5580 series appliances running ASA software earlier than 8.1(2), with authenticated IPsec L2L peers able to interact with the device. Prioritize if ASA 5580 appliances still protect critical VPN or perimeter paths. The vulnerability is old and authenticated, but a firewall denial of service can disrupt business connectivity. Mitigation focus: Inventory Cisco ASA 5580 devices and confirm ASA software versions.; Upgrade affected systems to 8.1(2) or later per Cisco guidance.; If unsupported, check Cisco guidance for replacement or compensating controls..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.