CVE-2010-2820: High severity cisco firewall services module vulnerability

Published Aug 6, 2010

Updated

Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61662.

Affected Software

23 affected components

Cisco Firewall Services Module Software=3.1

Cisco Firewall Services Module Software=3.1\(5\)

Cisco Firewall Services Module Software=3.1\(6\)

Cisco Firewall Services Module Software=3.1\(16\)

Cisco Firewall Services Module Software=3.1\(17\)

Cisco Firewall Services Module Software=3.2

Cisco Firewall Services Module Software=3.2\(1\)

Cisco Firewall Services Module Software=3.2\(2\)

Cisco Firewall Services Module Software=3.2\(3\)

Cisco Firewall Services Module Software=3.2\(13\)

Cisco Firewall Services Module Software=3.2\(14\)

Cisco Firewall Services Module Software=3.2\(16\)

Cisco Firewall Services Module Software=4.0

Cisco Firewall Services Module Software=4.0\(4\)

Cisco Firewall Services Module Software=4.0\(6\)

Cisco Firewall Services Module Software=4.0\(7\)

Cisco Firewall Services Module Software=4.0\(8\)

Cisco Firewall Services Module Software=4.0\(10\)

Cisco Firewall Services Module Software=4.1

Cisco Firewall Services Module Software=4.1\(1\)

Cisco Catalyst 6500

Cisco Catalyst 7600

Cisco Firewall Services Module

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml

Event History

Aug 6, 2010

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

Description

Aug 9, 2010

Data Sourced

11:58 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2820?

CVE-2010-2820 is classified as a medium severity vulnerability.

How do I fix CVE-2010-2820?

To fix CVE-2010-2820, update to the latest recommended versions of Cisco Firewall Services Module Software that are specified in the advisory.

Which software versions are affected by CVE-2010-2820?

CVE-2010-2820 affects Cisco Firewall Services Module Software versions 3.1, 3.2, 4.0, and 4.1 prior to specific updates.

Is CVE-2010-2820 applicable to Cisco Catalyst 6500 series switches?

Yes, CVE-2010-2820 is applicable to the Cisco Catalyst 6500 series switches running vulnerable versions of the software.

Can CVE-2010-2820 be exploited remotely?

Yes, CVE-2010-2820 can be exploited by remote attackers to potentially disrupt services.