CVE-2010-0137: Cisco IOS XR

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.

Affected products

• Cisco IOS XR: version 3.4.1 only; version 3.4.2 only; version 3.4.3 only; version 3.5.2 only; version 3.5.3 only; version 3.5.4 only; …

Published 2010-01-21. Last modified 2026-06-16.