Back to KEVs

CVE-2010-3035

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers...

Basic Information

CVE State
PUBLISHED
Reserved Date
August 17, 2010
Published Date
August 30, 2010
Last Updated
November 15, 2024
Vendor
Cisco
Product
IOS XR
Description
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
Tags
ios cisa edge

CVSS Scores

CVSS v3.1

7.5 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

SSVC Information

Exploitation
active
Automatable
Yes
Technical Impact
partial

Exploit Status

Exploited in the Wild
Yes (2022-03-25 00:00:00 UTC) Source

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 http://www.securitytracker.com/id?1024371 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html http://secunia.com/advisories/41190 http://www.vupen.com/english/advisories/2010/2227 http://osvdb.org/67696

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-03-25 00:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel