CVE-2010-0578 : Detail

CVE-2010-0578

A02-Cryptographic Failures
2.14%V4
Network
2010-03-25
19h31 +00:00
2017-08-16
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

The IKE implementation in Cisco IOS 12.2 through 12.4 on Cisco 7200 and 7301 routers with VAM2+ allows remote attackers to cause a denial of service (device reload) via a malformed IKE packet, aka Bug ID CSCtb13491.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-310 Category : Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Cisco>>Ios >> Version 12.2sb

Cisco>>Ios >> Version 12.2sca

Cisco>>Ios >> Version 12.2scb

Cisco>>Ios >> Version 12.2scc

Cisco>>Ios >> Version 12.2sra

Cisco>>Ios >> Version 12.3t

Cisco>>Ios >> Version 12.3xe

Cisco>>Ios >> Version 12.3xj

Cisco>>Ios >> Version 12.3xr

Cisco>>Ios >> Version 12.3xu

Cisco>>Ios >> Version 12.3xw

Cisco>>Ios >> Version 12.3xx

Cisco>>Ios >> Version 12.3yf

Cisco>>Ios >> Version 12.3yg

Cisco>>Ios >> Version 12.3yk

Cisco>>Ios >> Version 12.3yq

Cisco>>Ios >> Version 12.3ys

Cisco>>Ios >> Version 12.3yu

Cisco>>Ios >> Version 12.3yx

Cisco>>Ios >> Version 12.3za

Cisco>>Ios >> Version 12.4

Cisco>>Ios >> Version 12.4gc

Cisco>>Ios >> Version 12.4ja

Cisco>>Ios >> Version 12.4jda

Cisco>>Ios >> Version 12.4jdc

Cisco>>Ios >> Version 12.4jdd

Cisco>>Ios >> Version 12.4jk

Cisco>>Ios >> Version 12.4jl

Cisco>>Ios >> Version 12.4jma

Cisco>>Ios >> Version 12.4jmb

Cisco>>Ios >> Version 12.4jx

Cisco>>Ios >> Version 12.4md

Cisco>>Ios >> Version 12.4mda

Cisco>>Ios >> Version 12.4mr

Cisco>>Ios >> Version 12.4sw

Cisco>>Ios >> Version 12.4t

Cisco>>Ios >> Version 12.4xa

Cisco>>Ios >> Version 12.4xb

Cisco>>Ios >> Version 12.4xc

Cisco>>Ios >> Version 12.4xd

Cisco>>Ios >> Version 12.4xe

Cisco>>Ios >> Version 12.4xf

Cisco>>Ios >> Version 12.4xg

Cisco>>Ios >> Version 12.4xj

Cisco>>Ios >> Version 12.4xk

Cisco>>Ios >> Version 12.4xl

Cisco>>Ios >> Version 12.4xm

Cisco>>Ios >> Version 12.4xn

Cisco>>Ios >> Version 12.4xp

Cisco>>Ios >> Version 12.4xq

Cisco>>Ios >> Version 12.4xr

Cisco>>Ios >> Version 12.4xt

Cisco>>Ios >> Version 12.4xv

Cisco>>Ios >> Version 12.4xw

Cisco>>Ios >> Version 12.4xy

Cisco>>Ios >> Version 12.4xz

Cisco>>Ios >> Version 12.4ya

Cisco>>Ios >> Version 12.4yb

Cisco>>Ios >> Version 12.4yd

Cisco>>Ios >> Version 12.4ye

Cisco>>Ios >> Version 12.4yg

Cisco>>7200_router >> Version *

Cisco>>7301_router >> Version *

    Cisco>>Router_7200 >> Version *

    References

    http://www.securityfocus.com/bid/38932
    Tags : vdb-entry, x_refsource_BID
    http://www.securitytracker.com/id?1023741
    Tags : vdb-entry, x_refsource_SECTRACK
    http://osvdb.org/63182
    Tags : vdb-entry, x_refsource_OSVDB
    http://secunia.com/advisories/39057
    Tags : third-party-advisory, x_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2010/0709
    Tags : vdb-entry, x_refsource_VUPEN
    The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.