Security readout for executives and security teams
Plain-English summary
This CVE describes a Cisco IOS issue where a local user could cause a device reboot, creating a denial of service. The public record gives no CVSS score, CWE, or active exploitation evidence. Business impact is availability: network interruption from device restarts.
Executive priority
Treat as an availability risk for legacy Cisco IOS infrastructure. Prioritize confirmation in network inventory, then remediate affected devices through supported Cisco upgrade guidance. Urgency depends on whether local users can access device management functions.
Technical view
The CVE record states that Cisco IOS versions before 12.2(33)SXI allow local users to trigger a denial of service through device reboot. The cited Cisco material is a Catalyst 6500 IOS 12.2SX release-notes caveat source. Product and version metadata in the bundle is otherwise incomplete.
Likely exposure
Potential exposure is limited to environments running Cisco IOS before 12.2(33)SXI on platforms covered by the cited Cisco IOS release notes. The bundle does not provide complete affected CPEs or product inventory mappings.
Exploitation context
No active exploitation is cited, and the CVE is not listed as KEV in the provided bundle. The described attacker position is local user access, not remote unauthenticated access. Evidence is too limited to infer exploit maturity.
Researcher notes
The public bundle is sparse: no CVSS, CWE, CPEs, or exploit details are provided. Avoid over-scoping beyond Cisco IOS before 12.2(33)SXI and the cited Catalyst 6500 IOS release-note source. Validation should focus on version evidence and local-access pathways.
Mitigation direction
- Identify Cisco IOS devices running versions before 12.2(33)SXI.
- Review Cisco release notes and advisory guidance for the relevant platform.
- Plan upgrade or remediation according to Cisco-supported software guidance.
- Restrict local administrative access to trusted operators only.
- Monitor network devices for unexpected reboot events.
Validation and detection
- Inventory Cisco IOS versions across routers and switches.
- Confirm whether any device runs pre-12.2(33)SXI software.
- Map exposed devices to the Cisco release-note platform scope.
- Review logs for unexplained reloads or local user activity.
- Document compensating controls for devices awaiting upgrade.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2010-3049 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- 20150825 Chapter: Caveats in Release 12.2(33)SXI RebuildsCVE reference · vendor-advisory, x_refsource_CISCO
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.