CVE-2010-3035

Confirmed PUBLISHED

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers...

Cisco · IOS XR

Exploited in the wild

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

7.5 High

At a Glance

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

edge ios cisa

CVE Published: Aug 30, 2010
Exploitation Reported: Mar 25, 2022
CVSS: 7.5 High
EPSS: —

Remote Low complexity No user interaction Unauthenticated

Affected Versions

Vendor	Product	Version	Status
n/a	n/a	n/a	Affected

CVE References

20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability cisco.com · Vendor Advisory http://www.cisco.com/en/US/products/products_security_advisory09186a0...
41190 secunia.com · Third-Party Advisory http://secunia.com/advisories/41190
ciscoiosxr-bgp-packet-dos(61443) exchange.xforce.ibmcloud.com · VDB Entry https://exchange.xforce.ibmcloud.com/vulnerabilities/61443
1024371 securitytracker.com · VDB Entry http://www.securitytracker.com/id?1024371
ADV-2010-2227 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/2227

Show 2 more references

67696 osvdb.org · VDB Entry http://osvdb.org/67696
[nanog] 20100827 Did your BGP crash today? mailman.nanog.org · Mailing List http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2022-03-25 00:00 UTC

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2010-3035

{
  "cve_id": "CVE-2010-3035",
  "title": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly hand...",
  "affected_vendor": "Cisco",
  "affected_product": "IOS XR",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 7.5,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.