CVE-2007-3010

critical-risk
Published 2007-09-18

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Do I need to act?

!
94.0% chance of exploitation in next 30 days
EPSS score — higher than 6% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
3 public exploits available
16857, 30591, 10031
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Al-Enterprise

References (19)

Exploit http://marc.info/?l=full-disclosure&m=119002152126755&w=2
Broken Link http://osvdb.org/40521
Broken Link http://secunia.com/advisories/26853
Broken Link http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php
Broken Link http://www.securityfocus.com/archive/1/479699/100/0/threaded
Broken Link http://www.securityfocus.com/bid/25694
Broken Link http://www.vupen.com/english/advisories/2007/3185
Broken Link http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
Exploit http://marc.info/?l=full-disclosure&m=119002152126755&w=2
Broken Link http://osvdb.org/40521
Broken Link http://secunia.com/advisories/26853
Broken Link http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php
Broken Link http://www.securityfocus.com/archive/1/479699/100/0/threaded
Broken Link http://www.securityfocus.com/bid/25694
Broken Link http://www.vupen.com/english/advisories/2007/3185
Broken Link http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm
Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/36632
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-...
71
/ 100
critical-risk
Severity 32/34 · Critical
Exploitability 34/34 · Critical
Exposure 5/34 · Minimal