Is CVE-2010-0149 being actively exploited?

CVE-2010-0149 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-0149?

CVE-2010-0149 has a CVSS 2.0 base score of 7.8 (HIGH).

CVE-2010-0149

HIGH · CVSS 7.8EPSS 4.2%EU EUVD

Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka "TCP Connection Exhaustion Denial of Service Vulnerability."

Key facts

CVSS score: 7.8 (v2.0)
Severity: HIGH
CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS score: 4.2% (91th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-0181)
Published: February 19, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-0181 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

cisco / asa 5500
cisco / asa 5500
cisco / asa 5500
cisco / asa 5500
cisco / asa 5500
cisco / pix 500

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Cisco Intrusion Prevention System Version: Software Version 7.2(1) Components: IPS 4300 and 4500 series sensors (4345, 4360, 4510, and 4520); IPS hardware modules for ASA 5585-X (IPS SSP-10, SSP-20, SSP-40, and SSP-60); and IPS software modules on ASA 5500-X (ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X). - Cisco Systems, Inc. - Common Criteria Certificate Number: 2013/84 - archived

References

http://osvdb.org/62433
http://secunia.com/advisories/38618(Vendor Advisory)
http://secunia.com/advisories/38636(Vendor Advisory)
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml(Vendor Advisory)
http://www.securityfocus.com/bid/38275
http://www.securitytracker.com/id?1023612
http://www.vupen.com/english/advisories/2010/0415(Vendor Advisory)
https://exchange.xforce.ibmcloud.com/vulnerabilities/56336

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain