CVE-2010-2818: High severity cisco firewall services module vulnerability

Published Aug 6, 2010

Updated

Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61710.

Affected Software

23 affected components

Cisco Firewall Services Module Software=3.1

Cisco Firewall Services Module Software=3.1\(5\)

Cisco Firewall Services Module Software=3.1\(6\)

Cisco Firewall Services Module Software=3.1\(16\)

Cisco Firewall Services Module Software=3.1\(17\)

Cisco Firewall Services Module Software=3.2

Cisco Firewall Services Module Software=3.2\(1\)

Cisco Firewall Services Module Software=3.2\(2\)

Cisco Firewall Services Module Software=3.2\(3\)

Cisco Firewall Services Module Software=3.2\(13\)

Cisco Firewall Services Module Software=3.2\(14\)

Cisco Firewall Services Module Software=3.2\(16\)

Cisco Firewall Services Module Software=4.0

Cisco Firewall Services Module Software=4.0\(4\)

Cisco Firewall Services Module Software=4.0\(6\)

Cisco Firewall Services Module Software=4.0\(7\)

Cisco Firewall Services Module Software=4.0\(8\)

Cisco Firewall Services Module Software=4.0\(10\)

Cisco Firewall Services Module Software=4.1

Cisco Firewall Services Module Software=4.1\(1\)

Cisco Catalyst 6500

Cisco Catalyst 7600

Cisco Firewall Services Module

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml

Event History

Aug 6, 2010

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

Description

Aug 9, 2010

Data Sourced

11:58 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2818?

CVE-2010-2818 is classified as having a high severity, as it allows remote attackers to compromise the affected Cisco Firewall Services Module.

How do I fix CVE-2010-2818?

To fix CVE-2010-2818, upgrade the Cisco Firewall Services Module to a patched version, specifically versions 3.1(17.2), 3.2(16.1), 4.0(10.1), or 4.1(1.1) or later.

Which products are affected by CVE-2010-2818?

CVE-2010-2818 affects the Cisco Firewall Services Module software versions 3.1, 3.2, 4.0, and 4.1 on the Catalyst 6500 series switches and 7600 series routers.

Can CVE-2010-2818 be exploited remotely?

Yes, CVE-2010-2818 can be exploited remotely, allowing attackers to gain unauthorized access to affected systems.

What are the potential impacts of CVE-2010-2818?

Exploitation of CVE-2010-2818 may lead to unauthorized modification of system resources and could compromise network security.