Lucene search

K
cve[email protected]CVE-2010-2291
HistoryJun 15, 2010 - 2:04 p.m.

CVE-2010-2291

2010-06-1514:04:26
CWE-264
web.nvd.nist.gov
18
cve-2010-2291
snom
voip
phone
firmware
vulnerability
web interface
remote attackers
user credentials

7 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.4%

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
snomvoip_phone_firmwareMatch8.0.11beta
OR
snomvoip_phone_firmwareMatch8.0.12beta
OR
snomvoip_phone_firmwareMatch8.0.13beta
OR
snomvoip_phone_firmwareMatch8.1.1beta
OR
snomvoip_phone_firmwareMatch8.1.2beta
OR
snomvoip_phone_firmwareMatch8.1.3
OR
snomvoip_phone_firmwareMatch8.2.1
OR
snomvoip_phone_firmwareMatch8.2.2beta
OR
snomvoip_phone_firmwareMatch8.2.3beta
OR
snomvoip_phone_firmwareMatch8.2.4beta
OR
snomvoip_phone_firmwareMatch8.2.5beta
OR
snomvoip_phone_firmwareMatch8.2.6beta
OR
snomvoip_phone_firmwareMatch8.2.7beta
OR
snomvoip_phone_firmwareMatch8.2.8beta
OR
snomvoip_phone_firmwareMatch8.2.9beta
OR
snomvoip_phone_firmwareMatch8.2.10beta
OR
snomvoip_phone_firmwareMatch8.2.11beta
OR
snomvoip_phone_firmwareMatch8.2.16beta
OR
snomvoip_phone_firmwareMatch8.2.17beta
OR
snomvoip_phone_firmwareMatch8.2.18beta
OR
snomvoip_phone_firmwareMatch8.2.19beta
OR
snomvoip_phone_firmwareMatch8.2.20beta
OR
snomvoip_phone_firmwareMatch8.2.21beta
OR
snomvoip_phone_firmwareMatch8.2.22beta
OR
snomvoip_phone_firmwareMatch8.2.23beta
OR
snomvoip_phone_firmwareMatch8.2.24beta
OR
snomvoip_phone_firmwareMatch8.2.25beta
OR
snomvoip_phone_firmwareMatch8.2.26beta
OR
snomvoip_phone_firmwareMatch8.2.27beta
OR
snomvoip_phone_firmwareMatch8.2.28beta
OR
snomvoip_phone_firmwareMatch8.2.29beta
OR
snomvoip_phone_firmwareMatch8.2.30beta
OR
snomvoip_phone_firmwareMatch8.2.31beta
OR
snomvoip_phone_firmwareMatch8.2.32beta
OR
snomvoip_phone_firmwareMatch8.2.33beta
OR
snomvoip_phone_firmwareMatch8.2.34beta

7 High

AI Score

Confidence

Low

3.3 Low

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.4%

Related for CVE-2010-2291