CVE-2010-2834
Last modified
CVE-2010-2834 is a vulnerability of currently unknown severity. Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)SU1, 7.x before 7.1(5), and 8.0 before 8.0(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via crafted SIP registration traffic over UDP, aka Bug IDs CSCtf72678 and CSCtf14987.. EPSS estimates a 1.77% chance of exploitation in the next 30 days.
Description
Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5)SU1, 7.x before 7.1(5), and 8.0 before 8.0(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via crafted SIP registration traffic over UDP, aka Bug IDs CSCtf72678 and CSCtf14987.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 12.1 |
| Cisco | Ios | 12.1t |
| Cisco | Ios | 12.1xi |
| Cisco | Ios | 12.1xj |
| Cisco | Ios | 12.1xl |
| Cisco | Ios | 12.1xm |
| Cisco | Ios | 12.1xp |
| Cisco | Ios | 12.1xq |
| Cisco | Ios | 12.1xr |
| Cisco | Ios | 12.1xs |
| Cisco | Ios | 12.1xt |
| Cisco | Ios | 12.1xu |
| Cisco | Ios | 12.1xv |
| Cisco | Ios | 12.1xy |
| Cisco | Ios | 12.1ya |
| Cisco | Ios | 12.1yb |
| Cisco | Ios | 12.1yc |
| Cisco | Ios | 12.1yd |
| Cisco | Ios | 12.1ye |
| Cisco | Ios | 12.1yf |
| Cisco | Ios | 12.1yh |
| Cisco | Ios | 12.1yi |
| Cisco | Ios | 12.2b |
| Cisco | Ios | 12.2bw |
| Cisco | Ios | 12.2bx |
| Cisco | Ios | 12.2by |
| Cisco | Ios | 12.2cz |
| Cisco | Ios | 12.2dd |
| Cisco | Ios | 12.2dx |
| Cisco | Ios | 12.2ex |
| Cisco | Ios | 12.2ira |
| Cisco | Ios | 12.2irb |
| Cisco | Ios | 12.2irc |
| Cisco | Ios | 12.2ird |
| Cisco | Ios | 12.2ire |
| Cisco | Ios | 12.2ixa |
| Cisco | Ios | 12.2ixb |
| Cisco | Ios | 12.2ixc |
| Cisco | Ios | 12.2ixd |
| Cisco | Ios | 12.2ixe |
| Cisco | Ios | 12.2ixf |
| Cisco | Ios | 12.2ixg |
| Cisco | Ios | 12.2ixh |
| Cisco | Ios | 12.2mra |
| Cisco | Ios | 12.2mrb |
| Cisco | Ios | 12.2sbc |
| Cisco | Ios | 12.2sca |
| Cisco | Ios | 12.2scb |
| Cisco | Ios | 12.2scc |
| Cisco | Ios | 12.2scd |
Showing 50 of 235 affected configurations. See NVD for the full list.
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-2834?
How severe is CVE-2010-2834?
How do I fix CVE-2010-2834?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2828Unspecified vulnerability in the H.323 implementation in Cis…
- CVE-2010-2829Unspecified vulnerability in the H.323 implementation in Cis…
- CVE-2010-2830The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and…
- CVE-2010-2831Unspecified vulnerability in the NAT for SIP implementation …
- CVE-2010-2832Unspecified vulnerability in the NAT for H.323 implementatio…
- CVE-2010-2833Unspecified vulnerability in the NAT for H.225.0 implementat…
- CVE-2010-2835Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS…
- CVE-2010-2836Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, …
- CVE-2010-2837The SIPStationInit implementation in Cisco Unified Communica…
- CVE-2010-2838The SendCombinedStatusInfo implementation in Cisco Unified C…
- CVE-2010-2839SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x bef…
- CVE-2010-2840The Presence Engine (PE) service in Cisco Unified Presence 6…
Are you affected by CVE-2010-2834?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
