Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4304
HistoryNov 22, 2010 - 8:00 p.m.

CVE-2010-4304

2010-11-2220:00:04
CWE-310
[email protected]
web.nvd.nist.gov

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.9%

JSON

The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.

Affected configurations

NVD
Node
ciscounified_videoconferencing_system_5110_firmwareMatch7.0.1.13.3
OR
ciscounified_videoconferencing_system_5115_firmwareMatch7.0.1.13.3
AND
ciscounified_videoconferencing_system_5110
OR
ciscounified_videoconferencing_system_5115
Node
ciscounified_videoconferencing_system_3515_multipoint_control_unit_firmwareMatch7.0.1.13.3
OR
ciscounified_videoconferencing_system_3522_basic_rate_interface_gateway_firmwareMatch7.0.1.13.3
OR
ciscounified_videoconferencing_system_3527_primary_rate_interface_gateway_firmwareMatch7.0.1.13.3
OR
ciscounified_videoconferencing_system_3545_firmwareMatch7.0.1.13.3
OR
ciscounified_videoconferencing_system_5230_firmwareMatch7.0.1.13.3
AND
ciscounified_videoconferencing_system_3515_multipoint_control_unit
OR
ciscounified_videoconferencing_system_3522_basic_rate_interface_gateway
OR
ciscounified_videoconferencing_system_3527_primary_rate_interface_gateway
OR
ciscounified_videoconferencing_system_3545
OR
ciscounified_videoconferencing_system_5230

Related

prion 1
cve 1
cvelist 1
prion
prion
Command injection
2010-11-22 20:00:00
cve
cve
CVE-2010-4304
2022-10-03 16:21:04
cvelist
cvelist
CVE-2010-4304
2022-10-03 16:21:04

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.9%

JSON
Related for NVD:CVE-2010-4304
prion1cve1cvelist1