SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2010-4669

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang)…

HIGH 7.8EPSS 29.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 29.1%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote attackers to cause a denial of service (CPU consumption and system hang) by sending many Router Advertisement (RA) messages with different source addresses, as demonstrated by the flood_router6 program in the thc-ipv6 package.

CVSS 2.0
7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
29.11% probability · 98th percentile
CISA KEV
Not listed
Weakness
CWE-399
Affected
microsoft/windows 2003 server · microsoft/windows 7 · microsoft/windows server 2008 · microsoft/windows vista · microsoft/windows xp
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.