Is CVE-2010-4354 being actively exploited?

CVE-2010-4354 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-4354?

CVE-2010-4354 has a CVSS 2.0 base score of 5.0 (MEDIUM).

CVE-2010-4354

MEDIUM · CVSS 5.0EPSS 1.6%EU EUVD

The remote-access IPSec VPN implementation on Cisco Adaptive Security Appliances (ASA) 5500 series devices, PIX Security Appliances 500 series devices, and VPN Concentrators 3000 series devices responds to an Aggressive Mode IKE Phase I message only when the group name is configured on the device, which allows remote attackers to enumerate valid group names via a series of IKE negotiation attempts, aka Bug ID CSCtj96108, a different vulnerability than CVE-2005-2025.

Key facts

CVSS score: 5.0 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness (CWE): CWE-200
EPSS score: 1.6% (75th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-4323)
Published: November 30, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-4323 in the EU Vulnerability Database. Last updated in EUVD on September 16, 2024.

View on the EU Vulnerability Database

Affected products

cisco / asa 5500
cisco / pix 500
cisco / vpn 3000 concentrator
cisco / vpn 3005 concentrator
cisco / vpn 3015 concentrator
cisco / vpn 3020 concentrator
cisco / vpn 3030 concentator
cisco / vpn 3060 concentrator
cisco / vpn 3080 concentrator

Certified products that may be affected

5 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco FTD (NGFW) 7.0 on ASA 5500 and ISA 3000 and FTDv with FMC/FMCv - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11300-2023 - archived
Cisco Adaptive Security Appliances (ASA) 5500-X, Industrial Security Appliances (ISA) 3000 and Adaptive Security Appliances Virtual (ASAv) Version 9.16 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11257-2022 - archived
Cisco Adaptive Security Appliances (ASA) 5500, Industrial Security Appliances (ISA) 3000 and Adaptive Security Appliances Virtual (ASAv) Version 9.12 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11102-2021 - archived
Cisco Intrusion Prevention System Version: Software Version 7.2(1) Components: IPS 4300 and 4500 series sensors (4345, 4360, 4510, and 4520); IPS hardware modules for ASA 5585-X (IPS SSP-10, SSP-20, SSP-40, and SSP-60); and IPS software modules on ASA 5500-X (ASA 5512-X, 5515-X, 5525-X, 5545-X, and 5555-X). - Cisco Systems, Inc. - Common Criteria Certificate Number: 2013/84 - archived
Cisco VPN 3000 Series Concentrators - 3005, 3015, 3030, 3060 and 3080 - Cisco Systems, Inc. - FIPS 140 421 - historical

References

http://www.cisco.com/en/US/products/products_security_response09186a0080b5992c.html(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain