Summary
generated automatically from NVD dataCisco IOS (versions 12.2, 12.3, 12.4 and 15.0) and IOS XE 2.5.x before 2.5.2 contain a flaw in their IGMPv3 implementation. When PIM is enabled, a remote attacker can send a malformed IGMP packet that makes the device reload, causing a denial of service. The issue is tracked as Bug ID CSCte14603 and carries a CVSS v2.0 score of 7.1 (HIGH).
NVD description
The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed IGMP packet, aka Bug ID CSCte14603.
EPSS · FIRST.org
1.6%probability of exploitation in the next 30 days
Higher than 74% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 23 sept. 2010
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- psirt@cisco.com
Affected products
Weaknesses (CWE)
References (2)
Similar CVEs
Other vulnerabilities of type
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.