CVE-2010-2830: Cisco IOS

High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days.

The IGMPv3 implementation in Cisco IOS 12.2, 12.3, 12.4, and 15.0 and IOS XE 2.5.x before 2.5.2, when PIM is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed IGMP packet, aka Bug ID CSCte14603.

Affected products

• Cisco IOS: version 12.2 only; version 12.2b only; version 12.2bw only; version 12.2bx only; version 12.2by only; version 12.2cz only; …
• Cisco IOS XE: version 2.5.0 only; version 2.5.1 only

Published 2010-09-23. Last modified 2026-06-16.