CVE-2010-0577
N/A
Published: March 25, 2010 at 08:31 PM UTC
Updated: June 16, 2026 at 11:16 PM UTC
1 product affected across 1 vendorIOS
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of service (infinite loop, and device reload or hang) via a TCP segment with crafted options, aka Bug ID CSCsz75186.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
12.2b12.2bc12.2bx12.2by12.2bz12.2cx12.2cy12.2cz12.2jx12.2mc12.2t12.2tpc12.2xj12.2xk12.2xl12.2xm12.2xr12.2xw12.2ya12.2yb12.2yd12.2yf12.2yg12.2yh12.2yj12.2yl12.2ym12.2yn12.2yp12.2yq12.2yr12.2yt12.2yu12.2yv12.2yw12.2yy12.2zb12.2zc12.2zd12.2ze12.2zf12.2zg12.2zh12.2zj12.2zl12.2zp12.312.3b12.3bc12.3bw12.3ja12.3jea12.3jeb12.3jec12.3jed12.3jk12.3jl12.3jx12.3t12.3tpc12.3xa12.3xb12.3xc12.3xd12.3xe12.3xf12.3xg12.3xi12.3xj12.3xk12.3xl12.3xq12.3xr12.3xs12.3xu12.3xw12.3xx12.3xy12.3xz12.3ya12.3yd12.3yf12.3yg12.3yh12.3yi12.3yj12.3yk12.3ym12.3yq12.3ys12.3yt12.3yu12.3yx12.3yz12.3za12.412.4gc12.4ja12.4jda12.4jdc12.4jdd12.4jk12.4jl12.4jma12.4jmb12.4jx12.4md12.4mda12.4mr12.4sw12.4t12.4xa12.4xb12.4xc12.4xd12.4xe12.4xf12.4xg12.4xj12.4xk12.4xl12.4xm12.4xn12.4xp12.4xq12.4xr12.4xt12.4xv12.4xw12.4xy12.4xz12.4ya12.4yb12.4yd12.4ye12.4yg
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (7)
Vendor Advisoryx_refsource_CISCOPatch
Source: [email protected]
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f34.shtmlVDB Entryx_refsource_VUPEN
Source: [email protected]
http://www.vupen.com/english/advisories/2010/0703VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/57129Quick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card