CVE-2010-2836: Memory leak in the SSL VPN feature in Cisco IOS 12.4, 15.0, and 15.1, when HTTP port redirection is enabled...

Security readout for executives and security teams

This issue can let a remote attacker exhaust memory on Cisco IOS devices running SSL VPN when HTTP port redirection is enabled. The business impact is loss or degradation of VPN service, not data theft. The supplied sources do not provide a CVSS score or evidence of active exploitation. Exposure is likely limited to Cisco IOS 12.4, 15.0, or 15.1 devices with SSL VPN enabled and HTTP port redirection configured. Internet-facing VPN gateways are the main concern. The bundle does not identify exact fixed releases or broader affected platforms. Treat as a service-availability risk for legacy Cisco VPN infrastructure. Prioritize internet-facing and business-critical VPN gateways, especially where remote access outages would disrupt operations. Urgency is moderate unless local exposure confirms affected configurations. Mitigation focus: Review Cisco advisory CSCtg21685 for fixed releases and supported workarounds.; Inventory Cisco IOS SSL VPN gateways running 12.4, 15.0, or 15.1.; Disable HTTP port redirection where not required and approved by change control..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.