Lucene search
HistoryApr 29, 2010 - 7:30 p.m.
CVE-2010-1612
ibm
websphere
datapower
xml accelerator
xa35
xm70
xi50
xb60
xs40
soa appliances
denial of service
vulnerability
nvd
cve-2010-1612
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.6%
The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.
Affected configurations
Node
ibmwebsphere_datapower_xml_accelerator_xa35Range≤3.7.3.10
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.2
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.1
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.2
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.3
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.4
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.5
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.6
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.7
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.8
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.7.3.9
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.8.0.0
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.8.0.1
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.8.0.2
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.8.0.3
ORibmwebsphere_datapower_xml_accelerator_xa35Match3.8.0.4
qlogicethernet
Node
ibmwebsphere_datapower_xml_security_gateway_xs40Range≤3.7.3.10
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.2
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.1
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.2
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.3
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.4
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.5
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.6
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.7
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.8
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.7.3.9
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.8.0.0
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.8.0.1
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.8.0.2
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.8.0.3
ORibmwebsphere_datapower_xml_security_gateway_xs40Match3.8.0.4
qlogicethernet
Node
ibmwebsphere_datapower_datapower_integration_appliance_xi50Range≤3.7.3.10
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.2
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.1
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.2
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.3
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.4
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.5
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.6
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.7
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.8
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.7.3.9
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.8.0.0
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.8.0.1
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.8.0.2
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.8.0.4
ORibmwebsphere_datapower_datapower_integration_appliance_xi50Match3.8.03
qlogicethernet
Node
ibmwebsphere_datapower_b2b_appliance_xb60Range≤3.7.3.10
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.1
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.2
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.3
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.4
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.5
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.6
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.7
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.8
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.7.3.9
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.8.0.0
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.8.0.1
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.8.0.2
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.8.0.3
ORibmwebsphere_datapower_b2b_appliance_xb60Match3.8.0.4
qlogicethernet
Node
ibmwebsphere_datapower_low_latency_appliance_xm70Range≤3.7.3.10
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.1
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.2
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.3
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.4
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.5
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.6
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.7
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.8
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.7.3.9
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.8.0.0
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.8.0.1
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.8.0.2
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.8.0.3
ORibmwebsphere_datapower_low_latency_appliance_xm70Match3.8.0.4
qlogicethernet
References
www-01.ibm.com/support/docview.wss?uid=swg1IC61364
www-01.ibm.com/support/docview.wss?uid=swg24024770
www-01.ibm.com/support/docview.wss?uid=swg24024771
www-01.ibm.com/support/docview.wss?uid=swg24024772
www-01.ibm.com/support/docview.wss?uid=swg24024773
www-01.ibm.com/support/docview.wss?uid=swg24024774
www.securityfocus.com/archive/1/509163/100/0/threaded
www.securityfocus.com/bid/37952
Related
nvd
nvd
CVE-2010-1612
2010-04-29 19:30:00
cvelist
cvelist
CVE-2010-1612
2010-04-29 19:00:00
prion
prion
Design/Logic Flaw
2010-04-29 19:30:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.8 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.6%
Related for CVE-2010-1612