CVE-2010-3010
Last modified
CVE-2010-3010 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage (SMH) was originally assigned CVE-2010-3010 due to a CNA error, but CVE-2010-3012 is the appropriate identifier for the SMH issue.. EPSS estimates a 1.46% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability on the HP 3Com OfficeConnect Gigabit VPN Firewall 3CREVF100-73 with firmware before 1.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: a separate XSS issue for HP System Management Homepage (SMH) was originally assigned CVE-2010-3010 due to a CNA error, but CVE-2010-3012 is the appropriate identifier for the SMH issue.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hp | 3com Officeconnect Gigabit Vpn Firewall Software | <= 1.0.12 |
| Hp | 3com Officeconnect Gigabit Vpn Firewall Software | 1.0.8 |
| Hp | 3crevf100-73 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3010?
How severe is CVE-2010-3010?
How do I fix CVE-2010-3010?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3004Unspecified vulnerability in HP Operations Agent 7.36 and 8.…
- CVE-2010-3005Unspecified vulnerability in HP Operations Agent 7.36 and 8.…
- CVE-2010-3006Unspecified vulnerability on the HP ProLiant G6 Lights-Out 1…
- CVE-2010-3007Unspecified vulnerability in HP Data Protector Express, and …
- CVE-2010-3008Unspecified vulnerability in HP Data Protector Express, and …
- CVE-2010-3009Unspecified vulnerability in HP System Management Homepage (…
- CVE-2010-3011CRLF injection vulnerability in HP System Management Homepag…
- CVE-2010-3012Cross-site scripting (XSS) vulnerability in HP System Manage…
- CVE-2010-3013SQL injection vulnerability in groupadmin.php in Pligg befor…
- CVE-2010-3014The Coda filesystem kernel module, as used in NetBSD and Fre…
- CVE-2010-3015Integer overflow in the ext4_ext_get_blocks function in fs/e…
- CVE-2010-3016Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
Are you affected by CVE-2010-3010?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST