CVE-2010-3035

Katalog CVE

CVSS 7.5 · High KEV · sudah dieksploitasi EPSS 5,7%

Kerentanan pada cisco ios xr. Skor CVSS 3.1 7.5 (High) menurut NVD. Masuk katalog KEV CISA pada 25 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Rincian

Terbit di NVD

30 Agustus 2010

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

EPSS (30 hari)

5,7% peluang dieksploitasi; lebih tinggi dari 92,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Masuk KEV

25 Maret 2022

Tenggat CISA

15 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml broken link · advisory vendor
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 vdb entry · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035 pemerintah AS
• http://www.securitytracker.com/id?1024371 broken link · advisory pihak ketiga · vdb entry
• http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html mailing list
• http://osvdb.org/67696 broken link
• http://secunia.com/advisories/41190 broken link
• http://www.vupen.com/english/advisories/2010/2227 broken link