CVE-2010-1612: IBM WebSphere Datapower b2b Appliance XB60

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Affected products

• IBM WebSphere Datapower b2b Appliance XB60: up to and including 3.7.3.10; version 3.7.3.1 only; version 3.7.3.2 only; version 3.7.3.3 only; version 3.7.3.4 only; version 3.7.3.5 only; …
• IBM WebSphere Datapower Datapower Integration Appliance XI50: up to and including 3.7.3.10; version 3.7.2 only; version 3.7.3 only; version 3.7.3.1 only; version 3.7.3.2 only; version 3.7.3.3 only; …
• IBM WebSphere Datapower Low Latency Appliance XM70: up to and including 3.7.3.10; version 3.7.3.1 only; version 3.7.3.2 only; version 3.7.3.3 only; version 3.7.3.4 only; version 3.7.3.5 only; …
• IBM WebSphere Datapower XML Accelerator XA35: up to and including 3.7.3.10; version 3.7.2 only; version 3.7.3 only; version 3.7.3.1 only; version 3.7.3.2 only; version 3.7.3.3 only; …
• IBM WebSphere Datapower XML Security Gateway XS40: up to and including 3.7.3.10; version 3.7.2 only; version 3.7.3 only; version 3.7.3.1 only; version 3.7.3.2 only; version 3.7.3.3 only; …

Published 2010-04-29. Last modified 2026-06-16.