PT-2010-4318 · Cisco · Cisco Application Control Engine (Ace) 4710

Publicado 2010-08-13 · Atualizado 2011-07-26 · CVE-2010-2823

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine (ACE) 4710 appliance versions prior to A3(2.6)

Description The issue is related to an unspecified vulnerability in the deep packet inspection feature, allowing remote attackers to cause a denial of service (device reload) via crafted HTTP packets. This vulnerability is related to the inspection of HTTP, RTSP, and SIP protocols.

Recommendations For versions prior to A3(2.6), update to software version A3(2.6) or later to resolve the issue. As a temporary workaround, consider restricting access to the deep packet inspection feature until the update is applied.

Correção

Identificadores relacionados

CVE-2010-2823

Produtos afetados

Cisco Application Control Engine (Ace) 4710

Referências · 3

• http://cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2823 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2823 · Nota de Segurança