CVE-2010-0138

2010-01-2122:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

ciscoworks

ipm

buffer overflow

cve-2010-0138

remote code execution

windows

lan management solution

nvd

7.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.313 Low

EPSS

Percentile

97.0%

JSON

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a “third-party component,” aka Bug ID CSCsv62350.

CPENameOperatorVersion
cisco:ciscoworks_internetwork_performance_monitorcisco ciscoworks internetwork performance monitorle2.6
cisco:ciscoworks_internetwork_performance_monitorcisco ciscoworks internetwork performance monitoreq2.4
cisco:ciscoworks_internetwork_performance_monitorcisco ciscoworks internetwork performance monitoreq2.5

CPE	Name	Operator	Version
cisco:ciscoworks_internetwork_performance_monitor	cisco ciscoworks internetwork performance monitor	le	2.6
cisco:ciscoworks_internetwork_performance_monitor	cisco ciscoworks internetwork performance monitor	eq	2.4
cisco:ciscoworks_internetwork_performance_monitor	cisco ciscoworks internetwork performance monitor	eq	2.5