Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2010-1612

Published: Apr 29, 2010 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2010-1612
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Affected Software

NameVendorStart VersionEnd Version
Websphere_datapower_xml_accelerator_xa35Ibm*3.7.3.10 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.2 (including)3.7.2 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3 (including)3.7.3 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.1 (including)3.7.3.1 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.2 (including)3.7.3.2 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.3 (including)3.7.3.3 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.4 (including)3.7.3.4 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.5 (including)3.7.3.5 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.6 (including)3.7.3.6 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.7 (including)3.7.3.7 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.8 (including)3.7.3.8 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.7.3.9 (including)3.7.3.9 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.8.0.0 (including)3.8.0.0 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.8.0.1 (including)3.8.0.1 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.8.0.2 (including)3.8.0.2 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.8.0.3 (including)3.8.0.3 (including)
Websphere_datapower_xml_accelerator_xa35Ibm3.8.0.4 (including)3.8.0.4 (including)

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use