CVE-2010-4670: The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances...

Security readout for executives and security teams

This vulnerability can make older Cisco ASA 5500 and PIX firewalls consume CPU and hang when flooded with IPv6 Router Advertisement traffic. The business impact is firewall availability: disrupted inspection, VPN, or network access if exposed IPv6 paths reach vulnerable interfaces. Exposure is most likely where vulnerable ASA or PIX devices process IPv6 Neighbor Discovery traffic from untrusted or poorly controlled network segments. Environments without IPv6 enabled or without affected legacy Cisco appliances are less likely exposed. Handle as a legacy firewall availability risk. It is not marked as actively exploited, but vulnerable perimeter or segmentation firewalls can become a business outage point if reachable by hostile IPv6 Neighbor Discovery traffic. Mitigation focus: Inventory Cisco ASA 5500 and PIX devices and record software versions.; Check Cisco release notes or advisory guidance for fixed or supported replacement versions.; Prioritize upgrades or retirement for ASA 8.2(3) and earlier and PIX devices..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.