VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 9, 2009· Updated Apr 23, 2026

CVE-2009-1155

CVE-2009-1155

Description

Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 7.1(1) through 7.1(2)82, 7.2 before 7.2(4)27, 8.0 before 8.0(4)25, and 8.1 before 8.1(2)15, when AAA override-account-disable is entered in a general-attributes field, allow remote attackers to bypass authentication and establish a VPN session to an ASA device via unspecified vectors.

Affected products

8
  • Cisco Systems, Inc./Adaptive Security Appliance 55004 versions
    cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:adaptive_security_appliance_5500:7.2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.0:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:adaptive_security_appliance_5500:8.1:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Pix4 versions
    cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:cisco:pix:7.1:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:pix:7.2:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:pix:8.0:*:*:*:*:*:*:*
    • cpe:2.3:h:cisco:pix:8.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.