Unrated severityNVD Advisory· Published Jun 25, 2009· Updated Jun 16, 2026

CVE-2009-1203

Description

WebVPN on the Cisco Adaptive Security Appliances (ASA) device with software 8.0(4), 8.1.2, and 8.2.1 does not properly distinguish its own login screen from the login screens it produces for third-party (1) FTP and (2) CIFS servers, which makes it easier for remote attackers to trick a user into sending WebVPN credentials to an arbitrary server via a URL associated with that server, aka Bug ID CSCsy80709.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Cisco Adaptive Security Appliance4 versions
cpe:2.3:a:cisco:adaptive_security_appliance:8.0\(4\):*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:cisco:adaptive_security_appliance:8.0\(4\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:adaptive_security_appliance:8.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:adaptive_security_appliance:8.2.1:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*
Cisco Systems, Inc./Adaptive Security Appliance (ASA) Softwarellm-fuzzy
Range: 8.0(4), 8.1.2, 8.2.1

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000

CVE-2009-1203

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions