CVE-2010-0586
Last modified
CVE-2010-0586 is a vulnerability of currently unknown severity. Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability.". EPSS estimates a 2.53% chance of exploitation in the next 30 days.
Description
Cisco IOS 12.1 through 12.4, when Cisco Unified Communications Manager Express (CME) or Cisco Unified Survivable Remote Site Telephony (SRST) is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug ID CSCsz49741, the "SCCP Request Handling Denial of Service Vulnerability."
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 12.1yd |
| Cisco | Ios | 12.1ye |
| Cisco | Ios | 12.1yi |
| Cisco | Ios | 12.2b |
| Cisco | Ios | 12.2bx |
| Cisco | Ios | 12.2by |
| Cisco | Ios | 12.2mc |
| Cisco | Ios | 12.2t |
| Cisco | Ios | 12.2tpc |
| Cisco | Ios | 12.2xb |
| Cisco | Ios | 12.2xg |
| Cisco | Ios | 12.2xm |
| Cisco | Ios | 12.2xt |
| Cisco | Ios | 12.2xu |
| Cisco | Ios | 12.2xw |
| Cisco | Ios | 12.2ya |
| Cisco | Ios | 12.2yb |
| Cisco | Ios | 12.2yc |
| Cisco | Ios | 12.2yd |
| Cisco | Ios | 12.2yh |
| Cisco | Ios | 12.2yj |
| Cisco | Ios | 12.2yl |
| Cisco | Ios | 12.2ym |
| Cisco | Ios | 12.2yn |
| Cisco | Ios | 12.2yt |
| Cisco | Ios | 12.2yu |
| Cisco | Ios | 12.2yv |
| Cisco | Ios | 12.2yw |
| Cisco | Ios | 12.2yy |
| Cisco | Ios | 12.2zb |
| Cisco | Ios | 12.2zc |
| Cisco | Ios | 12.2zd |
| Cisco | Ios | 12.2ze |
| Cisco | Ios | 12.2zf |
| Cisco | Ios | 12.2zh |
| Cisco | Ios | 12.2zj |
| Cisco | Ios | 12.2zl |
| Cisco | Ios | 12.2zp |
| Cisco | Ios | 12.3 |
| Cisco | Ios | 12.3b |
| Cisco | Ios | 12.3jk |
| Cisco | Ios | 12.3t |
| Cisco | Ios | 12.3tpc |
| Cisco | Ios | 12.3xa |
| Cisco | Ios | 12.3xb |
| Cisco | Ios | 12.3xc |
| Cisco | Ios | 12.3xd |
| Cisco | Ios | 12.3xe |
| Cisco | Ios | 12.3xf |
| Cisco | Ios | 12.3xg |
Showing 50 of 93 affected configurations. See NVD for the full list.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=20070Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtmlPatch, Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=20070Patch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f33.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0586?
How severe is CVE-2010-0586?
How do I fix CVE-2010-0586?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0580Unspecified vulnerability in the SIP implementation in Cisco…
- CVE-2010-0581Unspecified vulnerability in the SIP implementation in Cisco…
- CVE-2010-0582Cisco IOS 12.1 through 12.4, and 15.0M before 15.0(1)M1, all…
- CVE-2010-0583Memory leak in the H.323 implementation in Cisco IOS 12.1 th…
- CVE-2010-0584Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP f…
- CVE-2010-0585Cisco IOS 12.1 through 12.4, when Cisco Unified Communicatio…
- CVE-2010-0587Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0588Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0589The Web Install ActiveX control (CSDWebInstaller) in Cisco S…
- CVE-2010-0590The CMSIPUtility component in Cisco Unified Communications M…
- CVE-2010-0591Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0592The CTI Manager service in Cisco Unified Communications Mana…
Are you affected by CVE-2010-0586?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
