CVE-2008-0028: Cisco Adaptive Security Appliance Software

High severity, CVSS 7.1. EPSS: 2% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3), when the Time-to-Live (TTL) decrement feature is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted IP packet.

Affected products

• Cisco Adaptive Security Appliance Software: before 7.2\(3\)6 (fixed in 7.2\(3\)6); version 8.0(3) only
• Cisco Pix Firewall Software: before 7.2\(3\)6 (fixed in 7.2\(3\)6); version 8.0(3) only

Published 2008-01-23. Last modified 2026-06-16.