CVE-2014-0653: The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remot...

Security readout for executives and security teams

This CVE describes a Cisco ASA Identity Firewall issue where a remote attacker could cause authentication-state changes using a crafted NetBIOS logout probe response. Business risk depends on whether ASA Identity Firewall is deployed. The source bundle does not provide affected versions, CVSS severity, or a confirmed patch level. Exposure appears limited to environments running Cisco Adaptive Security Appliance Software with Identity Firewall functionality. The provided data does not identify affected versions, so teams must compare deployed ASA releases and IDFW configuration against Cisco’s notice. Make this a targeted firewall configuration review, not a broad emergency, unless Cisco guidance confirms affected ASA versions in use or logs show suspicious authentication-state changes. Mitigation focus: Check Cisco’s CVE-2014-0653 notice and Bug ID CSCuj45340 for affected and fixed releases.; Inventory Cisco ASA deployments using Identity Firewall functionality.; Prioritize ASA upgrade or configuration changes only as directed by Cisco guidance..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.