CVE-2010-2825
First published: Tue Aug 17 2010(Updated: )
Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.4), allows remote attackers to cause a denial of service (device reload) via crafted SIP packets over (1) TCP or (2) UDP, aka Bug IDs CSCta65603 and CSCta71569.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ACE 4710 Application Control Engine | =a3\(2.0\) | |
| Cisco ACE 4710 Application Control Engine | =a1\(8.0\) | |
| Cisco ACE 4710 Application Control Engine | =a3\(1.0\) | |
| Cisco ACE 4710 Application Control Engine | ||
| Cisco ACE 4710 Application Control Engine | =a1\(2.0\) | |
| Cisco ACE 4710 Application Control Engine | =a1\(2.3\) | |
| Cisco Application Control Engine (ACE) 10 | <=a2\(3.1.0\) | |
| Cisco Application Control Engine (ACE) 10 | <=a2\(3.1.6\) | |
| Cisco Application Control Engine (ACE) 10 | <=a2\(3.2.2.0\) | |
| Cisco Catalyst 6500-E | ||
| Cisco Catalyst 7600 Series |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2010-2825?
The severity of CVE-2010-2825 is not officially rated, but it affects critical components in Cisco equipment that could lead to unauthorized access.
How do I fix CVE-2010-2825?
To fix CVE-2010-2825, upgrade to the appropriate Cisco software versions as recommended by Cisco for affected devices.
Which Cisco products are affected by CVE-2010-2825?
CVE-2010-2825 affects Cisco ACE 4710, the ACE Module, and certain versions of Catalyst 6500 and 7600 series devices.
Is CVE-2010-2825 being actively exploited?
There is no public indication that CVE-2010-2825 is actively being exploited in the wild.
What is the potential impact of CVE-2010-2825?
The potential impact of CVE-2010-2825 includes possible disruption of SIP services and unauthorized access to the network.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/cisco
- canonical/cisco ace 4710 application control engine
- version/cisco ace 4710 application control engine/a3\(2.0\)
- version/cisco ace 4710 application control engine/a1\(8.0\)
- version/cisco ace 4710 application control engine/a3\(1.0\)
- version/cisco ace 4710 application control engine/a1\(2.0\)
- version/cisco ace 4710 application control engine/a1\(2.3\)
- canonical/cisco application control engine (ace) 10
- version/cisco application control engine (ace) 10/a2\(3.1.0\)
- version/cisco application control engine (ace) 10/a2\(3.1.6\)
- version/cisco application control engine (ace) 10/a2\(3.2.2.0\)
- canonical/cisco catalyst 6500-e
- canonical/cisco catalyst 7600 series