GCVE - cpe:2.3:h:cisco:ace_4710:a1\(2.0\):*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:cisco:ace_4710:a1\(2.0\):*:*:*:*:*:*:*

part: h version: a1(2.0) update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Ace 4710 (`94788a51-bd16-59e3-9fb2-7c007d2d77d0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2825`	vulnerable	2026-06-08 04:55:10.932102	Details available Unspecified vulnerability in the SIP inspection feature on the Cisco Application Control Engine (ACE) Module with software A2(1.x) before A2(1.6), A2(2.x) before A2(2.3), and A2(3.x) before A2(3.1) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.4), allows remote attackers to cause a denial of service (device reload) via crafted SIP packets over (1) TCP or (2) UDP, aka Bug IDs CSCta65603 and CSCta71569. Published: 2010-08-13T20:00:00.000Z Updated: 2024-09-17T00:15:28.262Z Open on db.gcve.eu Reference links http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2823`	vulnerable	2026-06-08 04:55:10.931127	Details available Unspecified vulnerability in the deep packet inspection feature on the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6) allows remote attackers to cause a denial of service (device reload) via crafted HTTP packets, related to HTTP, RTSP, and SIP inspection, aka Bug ID CSCtb54493. Published: 2010-08-13T20:00:00.000Z Updated: 2024-09-17T01:05:47.202Z Open on db.gcve.eu Reference links http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2822`	vulnerable	2026-06-08 04:55:10.921797	Details available Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Module with software before A2(3.2) for Catalyst 6500 series switches and 7600 series routers, and the Cisco Application Control Engine (ACE) 4710 appliance with software before A3(2.6), allows remote attackers to cause a denial of service (device reload) via crafted RTSP packets over TCP, aka Bug IDs CSCta85227 and CSCtg14858. Published: 2010-08-13T20:00:00.000Z Updated: 2024-09-16T22:56:55.368Z Open on db.gcve.eu Reference links http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4091d.shtml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2629`	vulnerable	2026-06-08 04:55:09.137962	Details available The Cisco Content Services Switch (CSS) 11500 with software 8.20.4.02 and the Application Control Engine (ACE) 4710 with software A2(3.0) do not properly handle LF header terminators in situations where the GET line is terminated by CRLF, which allows remote attackers to conduct HTTP request smuggling attacks and possibly bypass intended header insertions via crafted header data, as demonstrated by an LF character between the ClientCert-Subject and ClientCert-Subject-CN headers. NOTE: this vulnerability exists because of an incomplete fix for CVE-2010-1576. Published: 2010-07-06T14:00:00.000Z Updated: 2024-08-07T02:39:37.669Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/512144/100/0/threaded http://securitytracker.com/id?1024167 http://www.securityfocus.com/bid/41315 http://www.vsecurity.com/resources/advisory/20100702-1/ http://securitytracker.com/id?1024168	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1576`	vulnerable	2026-06-08 04:54:09.069811	Details available The Cisco Content Services Switch (CSS) 11500 with software before 8.20.4.02 and the Application Control Engine (ACE) 4710 with software before A2(3.0) do not properly handle use of LF, CR, and LFCR as alternatives to the standard CRLF sequence between HTTP headers, which allows remote attackers to bypass intended header insertions or conduct HTTP request smuggling attacks via crafted header data, as demonstrated by LF characters preceding ClientCert-Subject and ClientCert-Subject-CN headers, aka Bug ID CSCta04885. Published: 2010-07-06T14:00:00.000Z Updated: 2024-08-07T01:28:41.990Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/512144/100/0/threaded http://securitytracker.com/id?1024167 http://www.securityfocus.com/bid/41315 http://www.vsecurity.com/resources/advisory/20100702-1/ http://osvdb.org/66092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0624`	vulnerable	2026-06-08 04:51:10.291115	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.