Improper input validation in Cisco Catalyst 6500
CVE-2010-2819
Unspecified vulnerability in the SunRPC inspection feature on the Cisco Firewall Services Module (FWSM) with software 3.1 before 3.1(17.2), 3.2 before 3.2(16.1), 4.0 before 4.0(10.1), and 4.1 before 4.1(1.1) for Catalyst 6500 series switches and 7600 series routers allows remote attackers to cause a denial of service (device reload) via crafted SunRPC messages, aka Bug ID CSCte61622.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.012 (66.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Catalyst_6500
- Cisco Catalyst_7600
- Cisco Firewall_services_module
- Cisco Firewall_services_module_software — versions 4.0(7), 3.2\(3\), 3.1\(5\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory)