CVE-2010-3035

Timeline

Detection, updates, and resolution for this record.

1. Aug 30, 2010 · Catalog

   Detected

   Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

2. Mar 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Affected

• cpe cisco/ios xrversion unspecified
• vendor Cisco IOS XRversion unspecified

Sources

• CISA KEVCVE-2010-3035

  Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

  cisa.gov
• CVE.orgCVE-2010-3035

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2010-3035

  30-day exploitation probability 5.7%

  first.org
• NIST NVDCVE-2010-3035

  Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attrib

  nvd.nist.gov

References

• Mailing List · mailman.nanog.org
• Broken Link · osvdb.org
• Broken Link · secunia.com
• Broken Link · cisco.com
• Broken Link · securitytracker.com
• VDB Entry · exchange.xforce.ibmcloud.com
• CISA note · nvd.nist.gov