CVE-2010-4689: Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.3(2) do not properly pr...

Security readout for executives and security teams

This CVE affects Cisco ASA 5500 firewalls running software before 8.3(2). After a migration, access-control behavior may not be preserved, so traffic that should remain blocked could be allowed. The main business risk is unintended exposure behind a firewall, especially in legacy environments. Exposure is most likely in legacy Cisco ASA 5500 deployments running software before 8.3(2), particularly devices that underwent configuration migration. The source bundle does not identify other affected products or versions. Treat this as a legacy firewall control-risk issue. It is not supported by provided evidence of active exploitation, but any affected perimeter firewall could silently allow traffic the business expects to block. Mitigation focus: Inventory Cisco ASA 5500 devices and record ASA software versions.; Prioritize any ASA 5500 running software before 8.3(2).; Review Cisco release notes and vendor guidance for CSCte46460..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.