First published: Tue Aug 17 2010(Updated: )
Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a sequence of SSL packets, aka Bug ID CSCta20756.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Application Control Engine (ACE) 10 | <=a2\(3.1.0\) | |
Cisco Application Control Engine (ACE) 10 | <=a2\(3.1.6\) | |
Cisco Application Control Engine (ACE) 10 | <=a2\(3.2.2.0\) | |
Cisco Catalyst 6500-E | ||
Cisco Catalyst 7600 Series |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-2824 has a severity rating that allows remote attackers to cause a denial of service.
To fix CVE-2010-2824, update the Cisco Application Control Engine Module to a version later than A2(1.6), A2(2.3), or A2(3.1).
CVE-2010-2824 affects Cisco Application Control Engine Module software versions A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1).
Yes, CVE-2010-2824 can be exploited remotely to cause a denial of service.
CVE-2010-2824 affects the Cisco Application Control Engine Module as well as specific Catalyst 6500 series switches and 7600 series routers.