CVE-2010-0589
Last modified
CVE-2010-0589 is a vulnerability of currently unknown severity. The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.. EPSS estimates a 4.76% chance of exploitation in the next 30 days.
Description
The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Desktop | <= 3.5 |
| Cisco | Secure Desktop | 3.1 |
| Cisco | Secure Desktop | 3.1.1 |
| Cisco | Secure Desktop | 3.1.1.27 |
| Cisco | Secure Desktop | 3.1.1.33 |
| Cisco | Secure Desktop | 3.2 |
| Cisco | Secure Desktop | 3.2.1 |
| Cisco | Secure Desktop | 3.3 |
| Cisco | Secure Desktop | 3.4 |
| Cisco | Secure Desktop | 3.4.1 |
| Cisco | Secure Desktop | 3.4.2 |
| Cisco | Secure Desktop | 3.4.2048 |
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b25d01.shtmlPatch, Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b25d01.shtmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0589?
How severe is CVE-2010-0589?
How do I fix CVE-2010-0589?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0583Memory leak in the H.323 implementation in Cisco IOS 12.1 th…
- CVE-2010-0584Unspecified vulnerability in Cisco IOS 12.4, when NAT SCCP f…
- CVE-2010-0585Cisco IOS 12.1 through 12.4, when Cisco Unified Communicatio…
- CVE-2010-0586Cisco IOS 12.1 through 12.4, when Cisco Unified Communicatio…
- CVE-2010-0587Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0588Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0590The CMSIPUtility component in Cisco Unified Communications M…
- CVE-2010-0591Cisco Unified Communications Manager (aka CUCM, formerly Cal…
- CVE-2010-0592The CTI Manager service in Cisco Unified Communications Mana…
- CVE-2010-0593The Cisco RVS4000 4-port Gigabit Security Router before 1.3.…
- CVE-2010-0594Cross-site scripting (XSS) vulnerability in Cisco Router and…
- CVE-2010-0595Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.…
Are you affected by CVE-2010-0589?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST