CVE-2007-3010criticalunder attackCWE-77

CVE-2007-3010

Published · Updated

Follow this CVE+ Monitor OmniPCX Enterprise

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 97%
from disclosure to weaponsame day
Published on NVDSep 18
1st PoCSep 17
metasploitSep 9
CISA KEV+5323d
Action required by CISAfederal deadline: 2022-05-06

Apply updates per vendor instructions.

In short

A tool used to manage Alcatel phone systems has a flaw that lets attackers run any command they want on the server by sending specially crafted requests. This is critical because attackers can take complete control of the system without needing permission.

Technical detail

masterCGI in Alcatel OmniPCX Enterprise's Unified Maintenance Tool (R7.1 and earlier) fails to properly sanitize the user parameter in ping actions, allowing OS command injection via shell metacharacters. Remote unauthenticated attackers can exploit this to achieve arbitrary command execution with system privileges. The vulnerability stems from insufficient input validation (CWE-77) before passing user input to shell operations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.