CVE-2009-4510

2010-04-1317:30:00

CWE-310

[email protected]

web.nvd.nist.gov

cve-2009-4510

ssh

tandberg vcs

man-in-the-middle attack

security vulnerability

6.7 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

51.6%

JSON

The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.

CPENameOperatorVersion
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx2.1.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx1.0.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx4.1.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx3.1.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx3.0.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx1.1.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx4.2.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication serverlex5.0.0
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx4.2.1
vsecurity:tandberg_video_communication_servervsecurity tandberg video communication servereqx1.2.0

CPE	Name	Operator	Version
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x2.1.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x1.0.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x4.1.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x3.1.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x3.0.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x1.1.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x4.2.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	le	x5.0.0
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x4.2.1
vsecurity:tandberg_video_communication_server	vsecurity tandberg video communication server	eq	x1.2.0