CVE-2010-0137
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CVE ID: CVE-2010-0137 Cisco IOS XR Software是美国思科（Cisco）公司的IOS软件系列（包括IOS T、IOS S和IOS XR）中的一套完全模块化、分布式的网络操作系统。 Cisco IOS XR Software的SSH服务器实现中的漏洞允许未经认证的远程用户导致拒绝服务。新的SSH处理器进程处理特制SSH v2报文时可触发这个漏洞，导致进程崩溃。在这个事件期间会耗尽大量内存，反复攻击可能影响其他系统功能，具体取决于可用内存大小和攻击持续时间。 尽管利用这个
Possible ATT&CK Techniques 3 AI
T1190 · Exploit Public-Facing Application T1571 · Non-Standard Port T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2010-0137
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco IOS XR SSH协议实现远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CVE ID: CVE-2010-0137 Cisco IOS XR Software是美国思科（Cisco）公司的IOS软件系列（包括IOS T、IOS S和IOS XR）中的一套完全模块化、分布式的网络操作系统。 Cisco IOS XR Software的SSH服务器实现中的漏洞允许未经认证的远程用户导致拒绝服务。新的SSH处理器进程处理特制SSH v2报文时可触发这个漏洞，导致进程崩溃。在这个事件期间会耗尽大量内存，反复攻击可能影响其他系统功能，具体取决于可用内存大小和攻击持续时间。 尽管利用这个
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2010-0137
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-0137
请登录查看更多情报信息。
Vendor Advisories for CVE-2010-0137 (5)
Other References for CVE-2010-0137 (1)
-
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml vendor-advisory x_refsource_CISCO
Same Patch Batch · n/a · 2010-01-21 · 19 CVEs total
| CVE-2010-0376 | JCE-Tech PHP Calendars product_list.php 跨站脚本攻击漏洞 | |
| CVE-2010-0232 | Microsoft Windows #GP陷阱处理器本地权限提升漏洞 | |
| CVE-2009-4003 | Adobe Shockwave Player多个整数溢出漏洞 | |
| CVE-2009-4002 | Adobe Shockwave Player远程缓冲区溢出漏洞 | |
| CVE-2010-0367 | BitScripts Bits 视频脚本 多个PHP远程文件包含漏洞 | |
| CVE-2010-0366 | Bits Video Script 任意文件上传漏洞 | |
| CVE-2010-0365 | BitScripts Bits 视频脚本 search.php 跨站脚本漏洞 | |
| CVE-2010-0364 | Videolan VLC媒体播放器ASS文件解析缓冲区溢出漏洞 | |
| CVE-2010-0377 | PHP MySpace Gold Edition "modules/arcade/index.php" SQL注入漏洞 | |
| CVE-2010-0378 | Adobe Flash Player Use-after-free 漏洞 | |
| CVE-2010-0375 | JCE-Tech PHP Calendars product_list.php SQL注入漏洞 | |
| CVE-2010-0374 | Joomla! 'com_marketplace'组件'catid'参数跨站脚本攻击漏洞 | |
| CVE-2010-0373 | Joomla! libros 组件 SQL注入漏洞 | |
| CVE-2010-0372 | Joomla! 'com_articlemanager'组件'artid'参数SQL注入漏洞 | |
| CVE-2010-0371 | Hitmaaan Gallery index.php 多个跨站脚本漏洞 | |
| CVE-2010-0370 | Drupal Node Block 模块 跨站脚本漏洞 | |
| CVE-2010-0138 | CiscoWorks IPM CORBA GIOP请求远程溢出漏洞 | |
| CVE-2010-0379 | Adobe Flash Player Macromedia Flash ActiveX控件 多个未明漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2010-0137
No comments yet