CVE-2010-2291
Last modified
CVE-2010-2291 is a vulnerability of currently unknown severity. Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in the web interface in snom VoIP Phone firmware 8 before 8.2.35 allows remote attackers to bypass intended restrictions and modify user credentials via unknown vectors. NOTE: some of these details are obtained from third party information.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Snom | Voip Phone Firmware | 8.0.11 | Beta |
| Snom | Voip Phone Firmware | 8.0.12 | Beta |
| Snom | Voip Phone Firmware | 8.0.13 | Beta |
| Snom | Voip Phone Firmware | 8.1.1 | Beta |
| Snom | Voip Phone Firmware | 8.1.2 | Beta |
| Snom | Voip Phone Firmware | 8.1.3 | — |
| Snom | Voip Phone Firmware | 8.2.1 | — |
| Snom | Voip Phone Firmware | 8.2.2 | Beta |
| Snom | Voip Phone Firmware | 8.2.3 | Beta |
| Snom | Voip Phone Firmware | 8.2.4 | Beta |
| Snom | Voip Phone Firmware | 8.2.5 | Beta |
| Snom | Voip Phone Firmware | 8.2.6 | Beta |
| Snom | Voip Phone Firmware | 8.2.7 | Beta |
| Snom | Voip Phone Firmware | 8.2.8 | Beta |
| Snom | Voip Phone Firmware | 8.2.9 | Beta |
| Snom | Voip Phone Firmware | 8.2.10 | Beta |
| Snom | Voip Phone Firmware | 8.2.11 | Beta |
| Snom | Voip Phone Firmware | 8.2.16 | Beta |
| Snom | Voip Phone Firmware | 8.2.17 | Beta |
| Snom | Voip Phone Firmware | 8.2.18 | Beta |
| Snom | Voip Phone Firmware | 8.2.19 | Beta |
| Snom | Voip Phone Firmware | 8.2.20 | Beta |
| Snom | Voip Phone Firmware | 8.2.21 | Beta |
| Snom | Voip Phone Firmware | 8.2.22 | Beta |
| Snom | Voip Phone Firmware | 8.2.23 | Beta |
| Snom | Voip Phone Firmware | 8.2.24 | Beta |
| Snom | Voip Phone Firmware | 8.2.25 | Beta |
| Snom | Voip Phone Firmware | 8.2.26 | Beta |
| Snom | Voip Phone Firmware | 8.2.27 | Beta |
| Snom | Voip Phone Firmware | 8.2.28 | Beta |
| Snom | Voip Phone Firmware | 8.2.29 | Beta |
| Snom | Voip Phone Firmware | 8.2.30 | Beta |
| Snom | Voip Phone Firmware | 8.2.31 | Beta |
| Snom | Voip Phone Firmware | 8.2.32 | Beta |
| Snom | Voip Phone Firmware | 8.2.33 | Beta |
| Snom | Voip Phone Firmware | 8.2.34 | Beta |
References
- http://secunia.com/advisories/37635Vendor Advisory
- http://secunia.com/advisories/37635Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-2291?
How severe is CVE-2010-2291?
How do I fix CVE-2010-2291?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-2285The SMB PIPE dissector in Wireshark 0.8.20 through 1.0.13 an…
- CVE-2010-2286The SigComp Universal Decompressor Virtual Machine dissector…
- CVE-2010-2287Buffer overflow in the SigComp Universal Decompressor Virtua…
- CVE-2010-2288Cross-site scripting (XSS) vulnerability in dana/nc/ncrun.cg…
- CVE-2010-2289Open redirect vulnerability in dana/home/homepage.cgi in Jun…
- CVE-2010-2290Cross-site scripting (XSS) vulnerability in cgi-bin/cgix/hel…
- CVE-2010-2292Cross-site scripting (XSS) vulnerability in the Ping tools w…
- CVE-2010-2293The Ping tools web interface in Dlink Di-604 router allows r…
- CVE-2010-2294Cross-site request forgery (CSRF) vulnerability in Plume CMS…
- CVE-2010-2295page/EventHandler.cpp in WebCore in WebKit in Google Chrome …
- CVE-2010-2296The implementation of unspecified DOM methods in Google Chro…
- CVE-2010-2297rendering/FixedTableLayout.cpp in WebCore in WebKit in Googl…
Are you affected by CVE-2010-2291?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
