CVE-2010-2821: High severity cisco firewall services module vulnerability

Published Aug 6, 2010

Updated

Unspecified vulnerability on the Cisco Firewall Services Module (FWSM) with software 3.2 before 3.2(17.2), 4.0 before 4.0(11.1), and 4.1 before 4.1(1.2) for Catalyst 6500 series switches and 7600 series routers, when multi-mode is enabled, allows remote attackers to cause a denial of service (device reload) via crafted (1) Telnet, (2) SSH, or (3) ASDM traffic over TCP, aka Bug ID CSCtg68694.

Affected Software

18 affected components

Cisco Firewall Services Module Software=3.2

Cisco Firewall Services Module Software=3.2\(1\)

Cisco Firewall Services Module Software=3.2\(2\)

Cisco Firewall Services Module Software=3.2\(3\)

Cisco Firewall Services Module Software=3.2\(13\)

Cisco Firewall Services Module Software=3.2\(14\)

Cisco Firewall Services Module Software=3.2\(16\)

Cisco Firewall Services Module Software=4.0

Cisco Firewall Services Module Software=4.0\(4\)

Cisco Firewall Services Module Software=4.0\(6\)

Cisco Firewall Services Module Software=4.0\(7\)

Cisco Firewall Services Module Software=4.0\(8\)

Cisco Firewall Services Module Software=4.0\(10\)

Cisco Firewall Services Module Software=4.1

Cisco Firewall Services Module Software=4.1\(1\)

Cisco Catalyst 6500

Cisco Catalyst 7600

Cisco Firewall Services Module

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3f130.shtml

Event History

Aug 6, 2010

CVE Published

via MITRE·07:31 PM

Data Sourced

via MITRE·07:31 PM

Description

Aug 9, 2010

Data Sourced

11:58 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-2821?

CVE-2010-2821 is classified as a denial of service vulnerability affecting certain versions of Cisco Firewall Services Module software.

How do I fix CVE-2010-2821?

To fix CVE-2010-2821, upgrade the Cisco Firewall Services Module software to versions 3.2(17.2), 4.0(11.1), or 4.1(1.2) or later.

Which Cisco products are affected by CVE-2010-2821?

CVE-2010-2821 affects the Cisco Firewall Services Module running specific versions of its software on Catalyst 6500 series switches and 7600 series routers.

Can CVE-2010-2821 be exploited remotely?

Yes, CVE-2010-2821 can be exploited remotely by attackers when multi-mode is enabled on the device.

What are the consequences of CVE-2010-2821?

The consequence of CVE-2010-2821 is a denial of service, potentially causing the affected devices to become unresponsive.