返回 CVE 浏览器

CVE-2010-3035

Known Exploited (CISA KEV)HIGH

7.5

CVSS Severity Score

EPSS Score46.3990%

EPSS Percentile86.12th

Published2010年8月30日

Last Modified2026年4月22日

Vulnerability Description

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Affected Platforms (CPE)

💻

Cisco

Ios Xr

>= 3.4.0 and <= 3.9.1

References & Advisories

🔗 http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html

🔗 http://osvdb.org/67696

🔗 http://secunia.com/advisories/41190

🔗 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml

🔗 http://www.securitytracker.com/id?1024371

🔗 http://www.vupen.com/english/advisories/2010/2227

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/61443

🔗 http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html

相关漏洞威胁

CVE-2019-1264310.0

A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote a...

CVE-2018-431010.0

An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10....

CVE-2019-623510.0

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12...

CVE-2019-1106310.0

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an...