CVE-2007-2464: Cisco Adaptive Security Appliance Software

High severity, CVSS 7.1. EPSS: 2.9% chance of exploitation in the next 30 days.

Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when using "clientless SSL VPNs," allows remote attackers to cause a denial of service (device reload) via "non-standard SSL sessions."

Affected products

• Cisco Adaptive Security Appliance Software: up to and including 7.2.2; version 7.1 only
• Cisco Pix: up to and including 7.2; version 7.1 only

Published 2007-05-02. Last modified 2026-06-16.