CVE-2010-2835

Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 6.x before 6.1(5), 7.0 before 7.0(2a)su3, 7.1su before 7.1(3b)su2, 7.1 before 7.1(5), and 8.0 before 8.0(1) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a SIP REFER request with an invalid Refer-To header, aka Bug IDs CSCta20040 and CSCta31358.

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtmlPatch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtmlPatch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a30f.shtmlPatch, Vendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a313.shtmlPatch, Vendor Advisory

Published

Sep 23, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2829Unspecified vulnerability in the H.323 implementation in Cis…
• CVE-2010-2830The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and…
• CVE-2010-2831Unspecified vulnerability in the NAT for SIP implementation …
• CVE-2010-2832Unspecified vulnerability in the NAT for H.323 implementatio…
• CVE-2010-2833Unspecified vulnerability in the NAT for H.225.0 implementat…
• CVE-2010-2834Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS…
• CVE-2010-2836Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, …
• CVE-2010-2837The SIPStationInit implementation in Cisco Unified Communica…
• CVE-2010-2838The SendCombinedStatusInfo implementation in Cisco Unified C…
• CVE-2010-2839SIPD in Cisco Unified Presence 6.x before 6.0(7) and 7.x bef…
• CVE-2010-2840The Presence Engine (PE) service in Cisco Unified Presence 6…
• CVE-2010-2841Unspecified vulnerability in Cisco Wireless LAN Controller (…