CVE-2010-2822: Unspecified vulnerability in the RTSP inspection feature on the Cisco Application Control Engine (ACE) Modu...

Security readout for executives and security teams

This CVE affects Cisco ACE load-balancing products. A remote attacker could send crafted RTSP traffic over TCP and cause the device to reload, creating an outage rather than data theft. Business urgency depends on whether legacy Cisco ACE devices still handle production traffic and whether RTSP inspection is enabled or reachable. Exposure is most likely in legacy environments still running Cisco ACE Module on Catalyst 6500 or 7600 platforms, or ACE 4710 appliances, below the fixed software versions. Risk increases where RTSP inspection processes traffic from untrusted networks. Prioritize if Cisco ACE still supports live customer, media, or partner traffic. The main risk is service disruption from device reloads. If ACE has been retired or is isolated from RTSP traffic, priority is lower but inventory confirmation is still needed. Mitigation focus: Identify any Cisco ACE Module or ACE 4710 still in production.; Upgrade ACE Module software to A2(3.2) or later where applicable.; Upgrade ACE 4710 software to A3(2.6) or later where applicable..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.