CVE-2010-2822
CVE-2010-2822 is a high-severity vulnerability in Cisco Ace 4710 with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.8)
- EPSS exploit prediction: 2% (75th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Ace 4710
- Published:
- Last modified:
Description
Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6), allows remote attackers to cause a denial of service (device reload) via crafted RTSP packets over TCP, aka Bug IDs CSCta85227 and CSCtg14858.
Frequently asked questions
- What is CVE-2010-2822?
- Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6), allows remote attackers to cause a denial of service (device reload) via crafted RTSP packets over TCP, aka Bug IDs CSCta85227 and CSCtg14858.
- How severe is CVE-2010-2822?
- CVE-2010-2822 has a CVSS 2.0 base score of 7.8, rated high severity.
- Is CVE-2010-2822 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (75th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2010-2822?
- CVE-2010-2822 primarily affects Cisco Ace 4710. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2010-2822?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2010-2822 published?
- CVE-2010-2822 was published on 2010-08-17 and last updated on 2026-06-16.
References
Affected products (6)
- cpe:2.3:h:cisco:ace_4710:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ace_4710:a1\(2.0\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ace_4710:a1\(8.0\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ace_4710:a3\(2.0\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ace_4710:a3\(2.5\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ace_module:*:*:*:*:*:*:*:*
More vulnerabilities in Cisco Ace 4710
- CVE-2009-0621 — Critical (CVSS 10.0): Cisco ACE 4710 Application Control Engine Appliance before A1(8a) uses default (1) usernames and (2) passwords for (a)…
- CVE-2009-0622 — Critical (CVSS 9.0): Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers…
- CVE-2010-2825 — High (CVSS 7.8): Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with…
- CVE-2010-2823 — High (CVSS 7.8): Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710…
- CVE-2009-0742 — High (CVSS 7.8): The username command in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers and…
- CVE-2009-0625 — High (CVSS 7.8): Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers…