Denial of Service Risk in Cisco Application Control Engine for Catalyst and 7600 Series
CVE-2010-2822

Currently unrated

Key Information:

Vendor
Cisco
Status
Ace 4710
Vendor
CVE Published:
17 August 2010

Summary

A vulnerability exists in the RTSP inspection feature of the Cisco Application Control Engine (ACE) Module, affecting the Catalyst 6500 series switches and 7600 series routers, as well as the Cisco ACE 4710 appliance. This flaw can be exploited by remote attackers using specially crafted RTSP packets over TCP, leading to a denial of service condition that results in device reloads and potential service disruption. Users are advised to update to the latest software versions to mitigate this risk.

References

http://www.cisco.com/en/US/products/products_security_adv...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.