How severe is CVE-1999-0158?

CVE-1999-0158 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-1999-0158 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (71st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-1999-0158?

CVE-1999-0158 primarily affects Cisco Pix Firewall Software. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-1999-0158?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-1999-0158 published?

CVE-1999-0158 was published on 1998-08-31 and last updated on 2026-06-16.

CVE-1999-0158

CVE-1999-0158 is a medium-severity vulnerability in Cisco Pix Firewall Software with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (71st percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Cisco Pix Firewall Software
Published: 1998-08-31
Last modified: 2026-06-16

Description

Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.

Frequently asked questions

What is CVE-1999-0158?: Cisco PIX firewall manager (PFM) on Windows NT allows attackers to connect to port 8080 on the PFM server and retrieve any file whose name and location is known.
How severe is CVE-1999-0158?: CVE-1999-0158 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-1999-0158 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (71st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-1999-0158?: CVE-1999-0158 primarily affects Cisco Pix Firewall Software. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-1999-0158?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-1999-0158 published?: CVE-1999-0158 was published on 1998-08-31 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:o:cisco:pix_firewall_software:4.1\(6\):*:*:*:*:*:*:*
cpe:2.3:o:cisco:pix_firewall_software:4.2\(1\):*:*:*:*:*:*:*

More vulnerabilities in Cisco Pix Firewall Software

CVE-2007-0960 — Critical (CVSS 9.0): Unspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to use the…
CVE-2016-6366 — High (CVSS 8.8): Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA…
CVE-2007-0961 — High (CVSS 7.8): Cisco PIX 500 and ASA 5500 Series Security Appliances 6.x before 6.3(5.115), 7.0 before 7.0(5.2), and 7.1 before…
CVE-2007-0962 — High (CVSS 7.8): Cisco PIX 500 and ASA 5500 Series Security Appliances 7.0 before 7.0(4.14) and 7.1 before 7.1(2.1), and the FWSM 2.x…
CVE-2007-0959 — High (CVSS 7.8): Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain TCP-based protocols,…
CVE-2003-1003 — High (CVSS 7.8): Cisco PIX firewall 5.x.x, and 6.3.1 and earlier, allows remote attackers to cause a denial of service (crash and…

All CVEs affecting Cisco Pix Firewall Software →