The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.01309.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Ibm
  • Websphere Datapower B2b Appliance Xb60
  • Websphere Datapower Datapower Integration Appliance Xi50
  • Websphere Datapower Low Latency Appliance Xm70
  • Websphere Datapower Xml Accelerator Xa35
  • Websphere Datapower Xml Security Gateway Xs40
Qlogic
  • Ethernet

Configuration 1 [-]

AND
OR cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_accelerator_xa35:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*

Configuration 2 [-]

AND
OR cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_xml_security_gateway_xs40:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*

Configuration 3 [-]

AND
OR cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_datapower_integration_appliance_xi50:3.8.03:*:*:*:*:*:*:*
cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*

Configuration 4 [-]

AND
OR cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_b2b_appliance_xb60:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*

Configuration 5 [-]

AND
OR cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.4:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.5:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.6:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.7:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.8:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.7.3.9:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.0:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.1:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.2:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.3:*:*:*:*:*:*:*
cpe:2.3:h:ibm:websphere_datapower_low_latency_appliance_xm70:3.8.0.4:*:*:*:*:*:*:*
cpe:2.3:h:qlogic:ethernet:*:*:*:*:*:*:*:*

No data.

No data.

Advisories
Source ID Title
EUVD EUVD EUVD-2010-1638 The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
http://www-01.ibm.com/support/docview.wss?uid=swg1IC61364 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg24024770 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg24024771 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg24024772 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg24024773 cve-icon cve-icon
http://www-01.ibm.com/support/docview.wss?uid=swg24024774 cve-icon cve-icon
http://www.securityfocus.com/archive/1/509163/100/0/threaded cve-icon cve-icon
http://www.securityfocus.com/bid/37952 cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T01:28:42.974Z

Reserved: 2010-04-29T00:00:00

Link: CVE-2010-1612

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2010-04-29T19:30:00.620

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-1612

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.