CVE-2010-4678: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) permit packets to...

Security readout for executives and security teams

This issue affects Cisco ASA 5500 firewalls running software before 8.2(3). During startup, traffic may pass before the firewall configuration is loaded, creating a short window where intended access restrictions may not apply. The risk is tied to reboot or power-cycle events, not normal steady-state operation. Exposure is most likely where Cisco ASA 5500 devices below 8.2(3) are internet-facing, protect sensitive zones, or reboot without upstream filtering. Devices already running 8.2(3) or later are not identified as affected in the supplied description. Prioritize remediation for perimeter or segmentation firewalls that can expose sensitive systems during restart. The issue is not reported as actively exploited, but it undermines firewall trust during operational events and should be closed during planned maintenance. Mitigation focus: Inventory Cisco ASA 5500 devices and identify software versions earlier than 8.2(3).; Upgrade affected ASA software to 8.2(3) or later, following Cisco guidance.; Avoid unnecessary reboots of affected devices until remediation is complete..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.