CVE-2010-2820
First published: Fri Aug 06 2010(Updated: )
Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61662.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firewall Services Module | =3.1 | |
| Cisco Firewall Services Module | =3.1\(5\) | |
| Cisco Firewall Services Module | =3.1\(6\) | |
| Cisco Firewall Services Module | =3.1\(16\) | |
| Cisco Firewall Services Module | =3.1\(17\) | |
| Cisco Firewall Services Module | =3.2 | |
| Cisco Firewall Services Module | =3.2\(1\) | |
| Cisco Firewall Services Module | =3.2\(2\) | |
| Cisco Firewall Services Module | =3.2\(3\) | |
| Cisco Firewall Services Module | =3.2\(13\) | |
| Cisco Firewall Services Module | =3.2\(14\) | |
| Cisco Firewall Services Module | =3.2\(16\) | |
| Cisco Firewall Services Module | =4.0 | |
| Cisco Firewall Services Module | =4.0\(4\) | |
| Cisco Firewall Services Module | =4.0\(6\) | |
| Cisco Firewall Services Module | =4.0\(7\) | |
| Cisco Firewall Services Module | =4.0\(8\) | |
| Cisco Firewall Services Module | =4.0\(10\) | |
| Cisco Firewall Services Module | =4.1 | |
| Cisco Firewall Services Module | =4.1\(1\) | |
| Cisco Catalyst 6500-E | ||
| Cisco Catalyst 7600 Series | ||
| Cisco Firewall Services Module Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2010-2820?
CVE-2010-2820 is classified as a medium severity vulnerability.
How do I fix CVE-2010-2820?
To fix CVE-2010-2820, update to the latest recommended versions of Cisco Firewall Services Module Software that are specified in the advisory.
Which software versions are affected by CVE-2010-2820?
CVE-2010-2820 affects Cisco Firewall Services Module Software versions 3.1, 3.2, 4.0, and 4.1 prior to specific updates.
Is CVE-2010-2820 applicable to Cisco Catalyst 6500 series switches?
Yes, CVE-2010-2820 is applicable to the Cisco Catalyst 6500 series switches running vulnerable versions of the software.
Can CVE-2010-2820 be exploited remotely?
Yes, CVE-2010-2820 can be exploited by remote attackers to potentially disrupt services.
- collector/nvd-historical
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firewall services module
- version/cisco firewall services module/3.1
- version/cisco firewall services module/3.1\(5\)
- version/cisco firewall services module/3.1\(6\)
- version/cisco firewall services module/3.1\(16\)
- version/cisco firewall services module/3.1\(17\)
- version/cisco firewall services module/3.2
- version/cisco firewall services module/3.2\(1\)
- version/cisco firewall services module/3.2\(2\)
- version/cisco firewall services module/3.2\(3\)
- version/cisco firewall services module/3.2\(13\)
- version/cisco firewall services module/3.2\(14\)
- version/cisco firewall services module/3.2\(16\)
- version/cisco firewall services module/4.0
- version/cisco firewall services module/4.0\(4\)
- version/cisco firewall services module/4.0\(6\)
- version/cisco firewall services module/4.0\(7\)
- version/cisco firewall services module/4.0\(8\)
- version/cisco firewall services module/4.0\(10\)
- version/cisco firewall services module/4.1
- version/cisco firewall services module/4.1\(1\)
- canonical/cisco catalyst 6500-e
- canonical/cisco catalyst 7600 series
- canonical/cisco firewall services module software