Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-3037
HistoryNov 22, 2010 - 8:00 p.m.

CVE-2010-3037

2010-11-2220:00:00
CWE-94
[email protected]
web.nvd.nist.gov
26
cve-2010-3037
cisco
unified videoconferencing
uvc
system 5110
5115
3545
5230
3527
3522
3515
authentication
shell command injection vulnerability
bug id cscti54059

7.9 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

71.0%

JSON

goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified Videoconferencing 3515 Multipoint Control Unit (MCU), allows remote authenticated administrators to execute arbitrary commands via the username field, related to a “shell command injection vulnerability,” aka Bug ID CSCti54059.

CPENameOperatorVersion
cisco:unified_videoconferencing_system_5110_firmwarecisco unified videoconferencing system 5110 firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_5115_firmwarecisco unified videoconferencing system 5115 firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_5110cisco unified videoconferencing system 5110eq*
cisco:unified_videoconferencing_system_5115cisco unified videoconferencing system 5115eq*
cisco:unified_videoconferencing_system_3515_multipoint_control_unit_firmwarecisco unified videoconferencing system 3515 multipoint control unit firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_3522_basic_rate_interface_gateway_firmwarecisco unified videoconferencing system 3522 basic rate interface gateway firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_3527_primary_rate_interface_gateway_firmwarecisco unified videoconferencing system 3527 primary rate interface gateway firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_3545_firmwarecisco unified videoconferencing system 3545 firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_5230_firmwarecisco unified videoconferencing system 5230 firmwareeq7.0.1.13.3
cisco:unified_videoconferencing_system_3515_multipoint_control_unitcisco unified videoconferencing system 3515 multipoint control uniteq*
Rows per page:
1-10 of 141

Related

prion 1
securityvulns 3
prion
prion
Command injection
2010-11-22 20:00:00
securityvulns
securityvulns
Cisco Unified Videoconferencing multiple vulnerabilities - CVE-2010-3037 CVE-2010-3038
2010-11-18 00:00:00
Cisco Unified Videoconferencing multiple security vulnerabilities
2010-11-18 00:00:00
Cisco Security Response: Multiple Vulnerabilities in Cisco Unified Videoconferencing Products
2010-11-18 00:00:00

7.9 High

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

71.0%

JSON
Related for CVE-2010-3037
prion1securityvulns3