PT-2010-4318 · Cisco · Cisco Application Control Engine (Ace) 4710

Published 2010-08-13 · Updated 2011-07-26 · CVE-2010-2823

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Application Control Engine (ACE) 4710 appliance versions prior to A3(2.6)

Description The issue is related to an unspecified vulnerability in the deep packet inspection feature, allowing remote attackers to cause a denial of service (device reload) via crafted HTTP packets. This vulnerability is related to the inspection of HTTP, RTSP, and SIP protocols.

Recommendations For versions prior to A3(2.6), update to software version A3(2.6) or later to resolve the issue. As a temporary workaround, consider restricting access to the deep packet inspection feature until the update is applied.

Fix

Related Identifiers

CVE-2010-2823

Affected Products

Cisco Application Control Engine (Ace) 4710

References · 3

• http://cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2823 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2823 · Note