PatchTheCVECVE-2010-4562: Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine wh
CVE-2010-4562 is a medium-severity flaw (CVSS 4.3) affecting windows 2000, windows 2003 server, windows 7. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Reply is sent, as demonstrated by thcping. NOTE: due to a typo, some sources map CVE-2010-4562 to a ProFTPd mod_sql vulnerability, but that issue is covered by CVE-2010-4652.
Why this priority
- EPSS top 3%: very likely to be exploited
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.3 (Medium) |
| EPSS exploit chance | 14.3% (top 3%) |
| CISA exploited list | No |
| Weakness | CWE-200 |
| Published | 2012-02-02 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2010-4562?
windows 2000: mitigate or apply the listed mitigation; windows 2003 server: mitigate or apply the listed mitigation; windows 7: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2010-4562 being exploited?
CVE-2010-4562 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2010-4562 affect?
CVE-2010-4562 affects windows 2000, windows 2003 server, windows 7. Severity is medium (CVSS 4.3). Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and determining whether an Echo Repl
How urgent is CVE-2010-4562?
Priority 44/100. EPSS top 3%: very likely to be exploited; On your watchlist
Software pages
Windows vulnerabilities · Windows Server vulnerabilities · ProFTPD vulnerabilities
Related CVEs
- CVE-2010-1735 MEDIUM 4.9 MITIGATE MITIGATE The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows
- CVE-2010-1734 MEDIUM 4.9 MITIGATE MITIGATE The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows loc
- CVE-2010-1690 MEDIUM 6.4 MITIGATE MITIGATE The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows
- CVE-2010-1689 MEDIUM 6.4 MITIGATE MITIGATE The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows
- CVE-2010-1255 MEDIUM 6.8 MITIGATE MITIGATE The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2,