CVE-2010-0576
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 2.97% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- cisco/ios · cisco/ios xe · cisco/ios xr
- Source
- psirt@cisco.com
References
- http://osvdb.org/63188
- http://secunia.com/advisories/39065
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee2.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/38938
- http://www.securitytracker.com/id?1023740
- http://www.vupen.com/english/advisories/2010/0707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57143
- http://osvdb.org/63188
- http://secunia.com/advisories/39065
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee2.shtmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/38938
- http://www.securitytracker.com/id?1023740
- http://www.vupen.com/english/advisories/2010/0707
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57143
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.