CVE-2010-3035

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-3035
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html Mailing List
http://osvdb.org/67696 Broken Link
http://secunia.com/advisories/41190 Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml Broken Link Vendor Advisory
http://www.securitytracker.com/id?1024371 Broken Link Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2010/2227 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 VDB Entry Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
History

16 Jul 2024, 17:49

Type Values Removed Values Added
CWE CWE-20 NVD-CWE-noinfo
CPE cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.8.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*		 cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5
References () http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html - () http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html - Mailing List
References () http://osvdb.org/67696 - () http://osvdb.org/67696 - Broken Link
References () http://secunia.com/advisories/41190 - () http://secunia.com/advisories/41190 - Broken Link
References () http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml - Vendor Advisory () http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml - Broken Link, Vendor Advisory
References () http://www.securitytracker.com/id?1024371 - () http://www.securitytracker.com/id?1024371 - Broken Link, Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2010/2227 - () http://www.vupen.com/english/advisories/2010/2227 - Broken Link
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 - VDB Entry, Vendor Advisory
Information

Published : 2010-08-30 21:00

Updated : 2024-07-16 17:49

NVD link : CVE-2010-3035

Mitre link : CVE-2010-3035

CVE.ORG link : CVE-2010-3035

JSON object : View

Products Affected

cisco

  • ios_xr
CWE
NVD-CWE-noinfo