CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2010-3035
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
Severity
- EPSS
- 5.7% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-03-25, due 2022-04-15
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:ios_xr