CVE-2010-0580: Cisco IOS

High severity, CVSS 10.0. EPSS: 5.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in the SIP implementation in Cisco IOS 12.3 and 12.4 allows remote attackers to execute arbitrary code via a malformed SIP message, aka Bug ID CSCsz48680, the "SIP Message Processing Arbitrary Code Execution Vulnerability."

Affected products

• Cisco IOS: version 12.3jk only; version 12.3t only; version 12.3xd only; version 12.3xf only; version 12.3xg only; version 12.3xi only; …

Published 2010-03-25. Last modified 2026-06-16.