Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

HIGH 7.5EXPLOITED (CISA KEV)CVE-2010-3035 · Published 30/08/2010 · updated 16/06/2026

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
IOS XR Cisco	Versions not published yet (product named by CISA KEV)

Description

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

References

mailman.nanog.org/pipermail/nanog/2010-August/024837.html · Mailing List
osvdb.org/67696 · Broken Link
secunia.com/advisories/41190 · Broken Link
cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml · Broken Link
securitytracker.com/id · Broken Link
vupen.com/english/advisories/2010/2227 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/61443 · VDB Entry
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2010-3035

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free