CVE-2010-3035

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Jun 16, 2026

Description

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://mailman.nanog.org/pipermail/nanog/2010-August/024837.htmlMailing List
http://osvdb.org/67696Broken Link
http://secunia.com/advisories/41190Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtmlBroken Link, Vendor Advisory
http://www.securitytracker.com/id?1024371Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/2227Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/61443VDB Entry, Vendor Advisory
http://mailman.nanog.org/pipermail/nanog/2010-August/024837.htmlMailing List
http://osvdb.org/67696Broken Link
http://secunia.com/advisories/41190Broken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtmlBroken Link, Vendor Advisory
http://www.securitytracker.com/id?1024371Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/2227Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/61443VDB Entry, Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035US Government Resource

Timeline

Published: Aug 30, 2010
Last modified: Jun 16, 2026
Added to CISA KEV: Mar 25, 2022
NVD status: Analyzed

Related CVEs from 2010

CVE-2010-303610.0Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow CVE-2010-30378.5goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing Syst CVE-2010-303810.0Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root CVE-2010-30396.8/usr/local/cm/bin/pktCap_protectData in Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6, 7, and 8 allows remote auth CVE-2010-304010.0Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attac CVE-2010-30419.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30429.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30439.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30449.3Multiple buffer overflows in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players T27LB before SP21 EP3 and T2 CVE-2010-30487.5Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory CVE-2010-30495.5Cisco IOS before 12.2(33)SXI allows local users to cause a denial of service (device reboot).CVE-2010-30506.5Cisco IOS before 12.2(33)SXI allows remote authenticated users to cause a denial of service (device reboot).