CVE-2010-3223

🗓️ 13 Oct 2010 18:00:00Reported by microsoftType

The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability.

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2010-3223	13 Oct 201018:00	–	cvelist
EUVD	EUVD-2010-3222	7 Oct 202500:30	–	euvd
NVD	CVE-2010-3223	13 Oct 201019:00	–	nvd
Prion	Design/Logic Flaw	13 Oct 201019:00	–	prion
securityvulns	Microsoft Security Bulletin MS10-086 - Moderate Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)	13 Oct 201000:00	–	securityvulns
Tenable Nessus	MS10-086: Vulnerability in Windows Shared Cluster Disks Could Allow Tampering (2294255)	13 Oct 201000:00	–	nessus
seebug.org	Microsoft Windows故障切换集群不安全文件权限漏洞（MS10-086）	17 Oct 201000:00	–	seebug

NVD

Node

microsoft windows_server_2008Matchr2itanium

microsoft windows_server_2008Matchr2x64

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-086
securitytracker	www.securitytracker.com/id
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6789

29 Apr 2026 01:13Current

6.7Medium risk

Vulners AI Score6.7

CVSS 27.5

EPSS0.01141

CWE-264