Cisco · IOS XR
CVE-2010-3035
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
What it is
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
CISA: Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: April 15, 2022
- Added to the CISA list
- March 25, 2022
- Published
- August 30, 2010
- Severity
- High 7.5 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 5.7% in the top 7.1% of all known vulnerabilities
- Weakness
- CWE-20
- More details
- NVD · CVE.org · CISA
All references (7)
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61443
- http://www.securitytracker.com/id?1024371
- http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html
- http://secunia.com/advisories/41190
- http://www.vupen.com/english/advisories/2010/2227
- http://osvdb.org/67696
More exploited flaws from Cisco
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| May 23, 2022 | Open Port | IOS XR | Medium 6.5 | 11% |
| Mar 25, 2022 | Border Gateway Protocol (BGP) Denial-of-Service | IOS XR | Medium 5.9 | 3.3% |
| Nov 3, 2021 | Software Discovery Protocol Format String | IOS XR | High 8.8 | 12% |
| Nov 3, 2021 | Software DVMRP Memory Exhaustion | IOS XR | High 8.6 | 3.7% |
| Nov 3, 2021 | Software DVMRP Memory Exhaustion | IOS XR | High 8.6 | 3.3% |
| Oct 14, 2026 | Relative Path Traversal | Secure Email Gateway | Critical 9.8 | 2.2% |
| Sep 30, 2026 | Hex Encoding | Catalyst SD-WAN Manager | Critical 9.8 | 39% |
| Sep 16, 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Critical 10.0 | 76% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.