CVE-2010-3037

Published 22 Nov 2010 · Updated 07 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.9%

goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconferencing (UVC) System 5110 and 5115, and possibly Unified Videoconferencing System 3545 and 5230, Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, and Unified Videoconferencing 3515 Multipoint Control Unit (MCU), allows remote authenticated administrators to execute arbitrary commands via the username field, related to a "shell command injection vulnerability," aka Bug ID CSCti54059.

Affected products

n/a · n/a

References

http://seclists.org/fulldisclosure/2010/Nov/167 http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html http://www.securityfocus.com/bid/44922 http://www.securitytracker.com/id?1024753 http://www.trustmatta.com/advisories/MATTA-2010-001.txt