CVE-2010-0580

Name: CVE-2010-0580
Creator: NVD / NIST
Published: 2010-03-25T21:00:00.797+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 5.16%

Last modified Jun 16, 2026

CVE-2010-0580 is a vulnerability of currently unknown severity. Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz48680, the "SIP Message Processing Arbitrary Code Execution Vulnerability.". EPSS estimates a 5.16% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz48680, the "SIP Message Processing Arbitrary Code Execution Vulnerability."

Metrics

EPSS Probability

5.16%

91.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Cisco	Ios	12.3jk
Cisco	Ios	12.3t
Cisco	Ios	12.3xd
Cisco	Ios	12.3xf
Cisco	Ios	12.3xg
Cisco	Ios	12.3xi
Cisco	Ios	12.3xj
Cisco	Ios	12.3xk
Cisco	Ios	12.3xl
Cisco	Ios	12.3xq
Cisco	Ios	12.3xr
Cisco	Ios	12.3xu
Cisco	Ios	12.3xw
Cisco	Ios	12.3xx
Cisco	Ios	12.3xy
Cisco	Ios	12.3yf
Cisco	Ios	12.3yg
Cisco	Ios	12.3yk
Cisco	Ios	12.3ym
Cisco	Ios	12.3yq
Cisco	Ios	12.3ys
Cisco	Ios	12.3yt
Cisco	Ios	12.3yu
Cisco	Ios	12.3yx
Cisco	Ios	12.3yz
Cisco	Ios	12.3za
Cisco	Ios	12.4
Cisco	Ios	12.4gc
Cisco	Ios	12.4md
Cisco	Ios	12.4mda
Cisco	Ios	12.4mr
Cisco	Ios	12.4t
Cisco	Ios	12.4xa
Cisco	Ios	12.4xb
Cisco	Ios	12.4xd
Cisco	Ios	12.4xp
Cisco	Ios	12.4xr
Cisco	Ios	12.4xt
Cisco	Ios	12.4ya
Cisco	Ios	12.4yb
Cisco	Ios	12.4yd
Cisco	Ios	12.4ye
Cisco	Ios	12.4yg

References

http://secunia.com/advisories/39068
http://securitytracker.com/id?1023744
http://tools.cisco.com/security/center/viewAlert.x?alertId=20064Patch, Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f32.shtmlPatch, Vendor Advisory
http://secunia.com/advisories/39068
http://securitytracker.com/id?1023744
http://tools.cisco.com/security/center/viewAlert.x?alertId=20064Patch, Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f32.shtmlPatch, Vendor Advisory

Timeline

Published: Mar 25, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-0580?

How severe is CVE-2010-0580?

Severity scoring for CVE-2010-0580 is pending analysis. The EPSS model estimates a 5.16% probability of exploitation in the next 30 days.

How do I fix CVE-2010-0580?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-0580?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST