CVE-2010-2836: Cisco IOS

High severity, CVSS 7.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled, allows remote attackers to cause a denial of service (memory consumption) by improperly disconnecting SSL sessions, leading to connections that remain in the CLOSE-WAIT state, aka Bug ID CSCtg21685.

Affected products

• Cisco IOS: version 12.4 only; version 12.4gc only; version 12.4mda only; version 12.4mr only; version 12.4mra only; version 12.4sw only; …

Published 2010-09-23. Last modified 2026-06-16.