Unscored severity · published Aug 17, 2010
CVE-2010-2824
Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Unspecified vulnerability on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via a sequence of SSL packets, aka Bug ID CSCta20756.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Ace Module · Cisco
through a2\(3.1.0\); through a2\(3.1.6\); through a2\(3.2.2.0\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2824
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml
More from Ace Module
–
CVE-2010-2825
Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and…
–
CVE-2010-2822
Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and…