CVE-2010-0584: High severity Cisco IOS vulnerability

Published Mar 25, 2010

Updated

Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP fragmentation support is enabled, allows remote attackers to cause a denial of service (device reload) via crafted Skinny Client Control Protocol (SCCP) packets, aka Bug ID CSCsy09250.

Affected Software

26 affected components

Cisco IOS=12.4gc

Cisco IOS=12.4md

Cisco IOS=12.4mda

Cisco IOS=12.4sw

Cisco IOS=12.4t

Cisco IOS=12.4xe

Cisco IOS=12.4xf

Cisco IOS=12.4xg

Cisco IOS=12.4xj

Cisco IOS=12.4xk

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.4xn

Cisco IOS=12.4xp

Cisco IOS=12.4xq

Cisco IOS=12.4xr

Cisco IOS=12.4xt

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.4xy

Cisco IOS=12.4xz

Cisco IOS=12.4ya

Cisco IOS=12.4yb

Cisco IOS=12.4yd

Cisco IOS=12.4ye

Cisco IOS=12.4yg

Event History

Mar 25, 2010

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

Description

Data Sourced

via NVD·09:00 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0584?

CVE-2010-0584 is classified as a high severity vulnerability due to its potential to cause denial of service by remote attackers.

How do I fix CVE-2010-0584?

To fix CVE-2010-0584, disable NAT SCCP fragmentation support on affected Cisco IOS devices or apply the recommended patches provided by Cisco.

Which Cisco IOS versions are affected by CVE-2010-0584?

CVE-2010-0584 affects multiple Cisco IOS 12.4 versions, including 12.4t, 12.4xq, 12.4xj, and several other sub-versions.

Can CVE-2010-0584 lead to device reloads?

Yes, CVE-2010-0584 can allow remote attackers to send crafted SCCP packets that result in device reloads.

What types of attacks can exploit CVE-2010-0584?

CVE-2010-0584 can be exploited via remote denial of service attacks using malicious SCCP packets.