CVE-2010-3035
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Description
CVE-2010-3035 is a high-severity denial-of-service vulnerability affecting Cisco IOS XR (versions >= 3.4.0, <= 3.9.1). Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). CISA has added CVE-2010-3035 to the Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. With an EPSS score of 3.24% (86.9th percentile), this vulnerability has a notable probability of being exploited.
KEV Information
CVSS Score
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HOpen in CalculatorAffected Products
| Vendor | Product | Version |
|---|---|---|
| cisco | ios xr | >= 3.4.0, <= 3.9.1 |
Multiple CVSS Assessments
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html(Mailing List)
- http://osvdb.org/67696(Broken Link)
- http://secunia.com/advisories/41190(Broken Link)
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml(Broken Link, Vendor Advisory)
- http://www.securitytracker.com/id?1024371(Broken Link, Third Party Advisory, VDB Entry)
- http://www.vupen.com/english/advisories/2010/2227(Broken Link)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61443(VDB Entry, Vendor Advisory)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035(US Government Resource)
Weakness Type
No CWE Assigned
No specific CWE has been assigned to CVE-2010-3035. Based on the vulnerability description, this is a denial-of-service issue in Cisco IOS XR where cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
Impact Analysis
CVE-2010-3035 represents a significant threat to organizations using Cisco IOS XR, carrying a CVSS score of 7.5. While confidentiality and integrity are not directly affected, the availability impact is high — successful exploitation can cause complete denial of service, disrupting critical business operations. The network-based attack vector requiring no authentication makes this vulnerability particularly accessible to opportunistic attackers and automated scanning tools.
Exploit Maturity
CVE-2010-3035 is listed in the CISA Known Exploited Vulnerabilities catalog, confirming real-world exploitation. The EPSS score of 3.24% (86.9th percentile) reflects a notable exploitation probability relative to other vulnerabilities. Despite being over 16 years old, this vulnerability continues to be relevant due to the persistence of unpatched legacy systems in production environments.
Remediation
- Apply vendor patches immediately as required by CISA KEV: Apply updates per vendor instructions. Upgrade Cisco IOS XR from affected versions (>= 3.4.0, <= 3.9.1) to the latest patched release.
- If immediate patching is not possible, restrict network access to the affected IOS XR service using firewall rules, ACLs, or network segmentation to limit exposure to trusted networks only.
- Monitor affected systems for signs of compromise by reviewing security logs for anomalous activity, unauthorized access attempts, and unexpected system changes related to IOS XR.
- Evaluate whether affected Cisco IOS XR deployments are still within vendor support. End-of-life systems should be prioritized for migration to supported alternatives.
- Review and update your organization's vulnerability management process to ensure CISA KEV entries with a remediation deadline of 2022-04-15 are addressed within the required timeframe.
Technical Details
CVE-2010-3035 is a security vulnerability affecting Cisco IOS XR in versions >= 3.4.0, <= 3.9.1. Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS). The vulnerability is exploitable remotely over the network, with low attack complexity, requiring no prior authentication. The CVSS 3.1 base score of 7.5 (HIGH) reflects no confidentiality impact, no integrity impact, and high availability impact.
Frequently Asked Questions
Is CVE-2010-3035 being actively exploited?
Yes. CVE-2010-3035 is listed in the CISA Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. The EPSS score of 3.24% (86.9th percentile) indicates a notable probability of exploitation.
What products are affected by CVE-2010-3035?
CVE-2010-3035 primarily affects Cisco IOS XR. The affected versions include >= 3.4.0, <= 3.9.1. Organizations should check whether any instances of the affected software are running in their environment.
How do I fix CVE-2010-3035?
Apply updates per vendor instructions. Specifically, upgrade from the affected versions (>= 3.4.0, <= 3.9.1) to the latest patched release from Cisco. As an interim measure, restrict network access to the affected service to trusted networks only.
How severe is CVE-2010-3035?
CVE-2010-3035 has a CVSS 3.1 score of 7.5, rated HIGH. This high severity rating indicates significant potential impact on affected systems. The inclusion in the CISA KEV catalog means organizations are required to remediate this vulnerability within the specified deadline.
Need Help With Vulnerability Management?
Our security experts can help you prioritize and remediate vulnerabilities effectively.