Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:pix_firewall_501:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductPix Firewall 501 (5cbabc09-262a-5c29-a00c-e5de0b0505b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-1579 not_vulnerable 2026-06-08 04:54:09.108821 Details available
Unspecified vulnerability in the SunRPC inspection feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.2 before 7.2(5), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), and 8.2 before 8.2(2) and Cisco PIX Security Appliances 500 series devices allows remote attackers to cause a denial of service (device reload) via crafted SunRPC UDP packets, aka Bug ID CSCtc79922.
Published: 2010-08-06T19:31:00.000Z
Updated: 2024-09-16T22:51:20.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4312 vulnerable 2026-06-08 04:49:17.529601 Details available
Cisco PIX 500 Series Security Appliances and ASA 5500 Series Adaptive Security Appliances, when running 7.0(x) up to 7.0(5) and 7.1(x) up to 7.1(2.4), and Firewall Services Module (FWSM) 3.1(x) up to 3.1(1.6), causes the EXEC password, local user passwords, and the enable password to be changed to a "non-random value" under certain circumstances, which causes administrators to be locked out and might allow attackers to gain access.
Published: 2006-08-23T22:00:00.000Z
Updated: 2024-08-07T19:06:07.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4194 vulnerable 2026-06-08 04:49:11.201289 Details available
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
Published: 2006-08-17T01:00:00.000Z
Updated: 2024-08-07T18:57:46.244Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3906 vulnerable 2026-06-08 04:49:10.455692 Details available
Internet Key Exchange (IKE) version 1 protocol, as implemented on Cisco IOS, VPN 3000 Concentrators, and PIX firewalls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of IKE Phase-1 packets that exceed the session expiration rate. NOTE: it has been argued that this is due to a design weakness of the IKE version 1 protocol, in which case other vendors and implementations would also be affected.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.430Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4499 vulnerable 2026-06-08 04:48:44.046470 Details available
The Downloadable RADIUS ACLs feature in Cisco PIX and VPN 3000 concentrators, when creating an ACL on the Cisco Secure Access Control Server (CS ACS), generates a random internal name for an ACL that is also used as a hidden user name and password, which allows remote attackers to gain privileges by sniffing the username from the cleartext portion of a RADIUS session, then using the password to log in to another device that uses CS ACS.
Published: 2005-12-22T11:00:00.000Z
Updated: 2024-08-07T23:46:05.525Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.