CVE-2010-1612

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-04-29 · updated 2026-06-16

Description

The IBM WebSphere DataPower XML Accelerator XA35, Low Latency Appliance XM70, Integration Appliance XI50, B2B Appliance XB60, and XML Security Gateway XS40 SOA Appliances before 3.8.0.0, when a QLOGIC Ethernet interface is used, allow remote attackers to cause a denial of service (interface outage) via malformed ICMP packets to the 0.0.0.0 destination IP address.

Affected products

IBM Websphere Datapower B2B Appliance Xb60: through 3.7.3.10; 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4, 3.7.3.5, 3.7.3.6 (+8)
IBM Websphere Datapower Datapower Integration Appliance Xi50: through 3.7.3.10; 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4 (+10)
IBM Websphere Datapower Low Latency Appliance Xm70: through 3.7.3.10; 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4, 3.7.3.5, 3.7.3.6 (+8)
IBM Websphere Datapower Xml Accelerator Xa35: through 3.7.3.10; 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4 (+10)
IBM Websphere Datapower Xml Security Gateway Xs40: through 3.7.3.10; 3.7.2, 3.7.3, 3.7.3.1, 3.7.3.2, 3.7.3.3, 3.7.3.4 (+10)

References

Get alerted when CVE-2010-1612 or the next vulnerability affects your stack