Strix
26.1K

CVE-2010-2291

UnknownEPSS 0.80%

Last modified

CVE-2010-2291 is a vulnerability of currently unknown severity. Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.

Metrics

EPSS Probability
0.80%

51.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
SnomVoip Phone Firmware8.0.11Beta
SnomVoip Phone Firmware8.0.12Beta
SnomVoip Phone Firmware8.0.13Beta
SnomVoip Phone Firmware8.1.1Beta
SnomVoip Phone Firmware8.1.2Beta
SnomVoip Phone Firmware8.1.3—
SnomVoip Phone Firmware8.2.1—
SnomVoip Phone Firmware8.2.2Beta
SnomVoip Phone Firmware8.2.3Beta
SnomVoip Phone Firmware8.2.4Beta
SnomVoip Phone Firmware8.2.5Beta
SnomVoip Phone Firmware8.2.6Beta
SnomVoip Phone Firmware8.2.7Beta
SnomVoip Phone Firmware8.2.8Beta
SnomVoip Phone Firmware8.2.9Beta
SnomVoip Phone Firmware8.2.10Beta
SnomVoip Phone Firmware8.2.11Beta
SnomVoip Phone Firmware8.2.16Beta
SnomVoip Phone Firmware8.2.17Beta
SnomVoip Phone Firmware8.2.18Beta
SnomVoip Phone Firmware8.2.19Beta
SnomVoip Phone Firmware8.2.20Beta
SnomVoip Phone Firmware8.2.21Beta
SnomVoip Phone Firmware8.2.22Beta
SnomVoip Phone Firmware8.2.23Beta
SnomVoip Phone Firmware8.2.24Beta
SnomVoip Phone Firmware8.2.25Beta
SnomVoip Phone Firmware8.2.26Beta
SnomVoip Phone Firmware8.2.27Beta
SnomVoip Phone Firmware8.2.28Beta
SnomVoip Phone Firmware8.2.29Beta
SnomVoip Phone Firmware8.2.30Beta
SnomVoip Phone Firmware8.2.31Beta
SnomVoip Phone Firmware8.2.32Beta
SnomVoip Phone Firmware8.2.33Beta
SnomVoip Phone Firmware8.2.34Beta

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2010-2291?
Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.
How severe is CVE-2010-2291?
Severity scoring for CVE-2010-2291 is pending analysis. The EPSS model estimates a 0.80% probability of exploitation in the next 30 days.
How do I fix CVE-2010-2291?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-2291?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST