Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

BID:43396

Info

Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

Bugtraq ID: 43396
Class: Unknown
CVE: CVE-2010-2830
Remote: Yes
Local: No
Published: Sep 22 2010 12:00AM
Updated: Mar 19 2015 09:30AM
Credit: Cisco.
Vulnerable: Cisco IOS XE 2.5.2
Cisco IOS 15.0M
Cisco IOS 15.0M
Cisco IOS 12.4YG
Cisco IOS 12.4YE
Cisco IOS 12.4YD
Cisco IOS 12.4YB
Cisco IOS 12.4YA
Cisco IOS 12.4XZ
Cisco IOS 12.4XY
Cisco IOS 12.4XW
Cisco IOS 12.4XV
Cisco IOS 12.4XT
Cisco IOS 12.4XR
Cisco IOS 12.4XQ
Cisco IOS 12.4XP
Cisco IOS 12.4XN
Cisco IOS 12.4XM
Cisco IOS 12.4XL
Cisco IOS 12.4XK
Cisco IOS 12.4XJ
Cisco IOS 12.4XG
Cisco IOS 12.4XF
Cisco IOS 12.4XE
Cisco IOS 12.4XD
Cisco IOS 12.4XC
Cisco IOS 12.4XB
Cisco IOS 12.4XA
Cisco IOS 12.4T
Cisco IOS 12.4SW
Cisco IOS 12.4MR
Cisco IOS 12.4MDA
Cisco IOS 12.4MD
Cisco IOS 12.4GC
Cisco IOS 12.4
Cisco IOS 12.3YX
Cisco IOS 12.3YU
Cisco IOS 12.3YT
Cisco IOS 12.3YS
Cisco IOS 12.3YQ
Cisco IOS 12.3YM
Cisco IOS 12.3YK
Cisco IOS 12.3T
Cisco IOS 12.2XNF
Cisco IOS 12.2XNE
Cisco IOS 12.2XND
Cisco IOS 12.2XNC
Cisco IOS 12.2XNB
Cisco IOS 12.2XNA
Not Vulnerable: Cisco IOS XE 2.6.2
Cisco IOS 15.0(1)M2
Cisco IOS 12.4(24)T3

Discussion

Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability in the Internet Group Management Protocol (IGMP).

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCte14603.

Exploit / POC

Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Solution / Fix

Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the referenced advisory for more information.

References

Cisco IOS Internet Group Management Protocol Denial of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report