{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T06:52:09Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20100811-ace","slug":"cisco-sa-20100811-ace","vendor":"Cisco","title":"Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine","summary":"The Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine contain the following DoS vulnerabilities: Real-Time Streaming Protocol (RTSP) inspection DoS vulnerability HTTP, RTSP, and Session Initiation Protocol (SIP) inspection DoS vulnerability Secure Socket Layer (SSL) DoS vulnerability SIP inspection DoS vulnerability Cisco has released free software updates for affected customers. Workarounds that mitigate some of the vulnerabilities are available. Note: These vulnerabilities are independent of each other. A device may be affected by one vulnerability and not affected by another. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100811-ace.","severity":"High","published_at":"2010-08-11T16:00:00Z","updated_at":"2010-08-11T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100811-ace","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20100811-ace/csaf/cisco-sa-20100811-ace.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":4,"visible_product_count":1,"public_evidence_count":3,"kev_count":0,"highest_epss":0.01763},"cves":[{"id":"CVE-2010-2822","kev":false,"epss":{"score":0.01763,"percentile":0.75573,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-2823","kev":false,"epss":{"score":0.01758,"percentile":0.75495,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-2825","kev":false,"epss":{"score":0.01205,"percentile":0.6491,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}},{"id":"CVE-2010-2824","kev":false}],"public_evidence":[{"product":{"name":"Cisco ACE 4700 Series Application Control Engine Appliances","slug":"cisco-ace-4700-series-application-control-engine-appliances","vendor":"Cisco"},"cve":{"id":"CVE-2010-2822"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:55:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ACE 4700 Series Application Control Engine Appliances","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01763,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-08-11T16:00:00Z","updated_at":"2010-08-11T16:00:00Z","advisory_updated_at":"2010-08-11T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100811-ace","row_display_order":1},{"product":{"name":"Cisco ACE 4700 Series Application Control Engine Appliances","slug":"cisco-ace-4700-series-application-control-engine-appliances","vendor":"Cisco"},"cve":{"id":"CVE-2010-2823"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:55:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ACE 4700 Series Application Control Engine Appliances","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01758,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-08-11T16:00:00Z","updated_at":"2010-08-11T16:00:00Z","advisory_updated_at":"2010-08-11T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100811-ace","row_display_order":2},{"product":{"name":"Cisco ACE 4700 Series Application Control Engine Appliances","slug":"cisco-ace-4700-series-application-control-engine-appliances","vendor":"Cisco"},"cve":{"id":"CVE-2010-2825"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:55:57Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ACE 4700 Series Application Control Engine Appliances","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01205,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2010-08-11T16:00:00Z","updated_at":"2010-08-11T16:00:00Z","advisory_updated_at":"2010-08-11T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100811-ace","row_display_order":3}]}