CVE-2010-4684: Cisco IOS

High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days.

Cisco IOS before 15.0(1)XA1, when certain TFTP debugging is enabled, allows remote attackers to cause a denial of service (device crash) via a TFTP copy over IPv6, aka Bug ID CSCtb28877.

Affected products

• Cisco IOS: before 15.0\(1\)xa1 (fixed in 15.0\(1\)xa1)

Published 2011-01-07. Last modified 2026-06-16.