Lucene search

K
cve[email protected]CVE-2010-3279
HistorySep 23, 2010 - 7:00 p.m.

CVE-2010-3279

2010-09-2319:00:00
CWE-16
web.nvd.nist.gov
19
cve-2010-3279
ccagent
alcatel-lucent
omnitouch
contact center
management server
tsa
maintenance access
remote attackers
monitor
reconfigure operations

6.8 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:P/A:C

0.018 Low

EPSS

Percentile

88.1%

The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.

6.8 Medium

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:P/A:C

0.018 Low

EPSS

Percentile

88.1%

Related for CVE-2010-3279