Servers and applications
CVE-2010-4677 emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of service (daemon crash) via a request for a document whose name contains space characters, aka Bug ID CSCsy08416.
Severity Medium 5.0
Published 7 Jan 2011
Last changed 16 Jun 2026
Added to UpHeron 1 Nov 2026 Exploit chance 2.2% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST , 12 Nov 2026
Attack Over the network · No login needed
Attacker can Slow it down
CVSS vector AV:N/AC:L/Au:N/C:N/I:N/A:P
Sources NVD Affected software Software Affected versions Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software Version 8.2.2-interim Version 8.2.2 Version 8.2.1 Version 8.2(1) All 56 release lines Every version up to 8.2\(2\) Version 7.0 Version 7.0(0) Version 7.0(2) Version 7.0(4) Version 7.0(5) Version 7.0(5.2) Version 7.0(6.7) Version 7.0.1 Version 7.0.1.4 Version 7.0.2 Version 7.0.4 Version 7.0.4.3 Version 7.0.5 Version 7.0.6 Version 7.0.7 Version 7.0.8 Version 7.0.8-interim Version 7.1 Version 7.1(2) Version 7.1(2.5) Version 7.1(2.27) Version 7.1(2.48) Version 7.1(2.49) Version 7.1(5) Version 7.1.1 Version 7.1.2 Version 7.2 Version 7.2(1) Version 7.2(1.22) Version 7.2(2) Version 7.2(2.5) Version 7.2(2.7) Version 7.2(2.8) Version 7.2(2.10) Version 7.2(2.14) Version 7.2(2.15) Version 7.2(2.16) Version 7.2(2.17) Version 7.2(2.18) Version 7.2(2.19) Version 7.2(2.48) Version 7.2.1 Version 7.2.2 Version 7.2.3 Version 7.2.4 Version 7.2.5 Version 8.0 Version 8.0.2 Version 8.0.3 Version 8.0.4 Version 8.0.5 Version 8.2(1) Version 8.2.1 Version 8.2.2 Version 8.2.2-interim
References NVD https://nvd.nist.gov/vuln/detail/CVE-2010-4677 CVE.org https://www.cve.org/CVERecord?id=CVE-2010-4677