CVE-2010-3036
UnknownEPSS 5.99%
Last modified
CVE-2010-3036 is a vulnerability of currently unknown severity. Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.. EPSS estimates a 5.99% chance of exploitation in the next 30 days.
Description
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Cisco | Ciscoworks Common Services | 3.0.5 | — |
| Cisco | Ciscoworks Common Services | 3.0.6 | — |
| Cisco | Ciscoworks Common Services | 3.1 | — |
| Cisco | Ciscoworks Common Services | 3.1.1 | — |
| Cisco | Ciscoworks Common Services | 3.2 | — |
| Cisco | Ciscoworks Common Services | 3.3 | — |
| Cisco | Ciscoworks Lan Management Solution | 2.6 | Update |
| Cisco | Ciscoworks Lan Management Solution | 3.0 | — |
| Cisco | Ciscoworks Lan Management Solution | 3.1 | — |
| Cisco | Ciscoworks Lan Management Solution | 3.2 | — |
| Cisco | Qos Policy Manager | 4.0 | — |
| Cisco | Qos Policy Manager | 4.0.1 | — |
| Cisco | Qos Policy Manager | 4.0.2 | — |
| Cisco | Security Manager | 3.0.2 | — |
| Cisco | Security Manager | 3.2 | — |
| Cisco | Telepresence Readiness Assessment Manager | 1.0 | — |
| Cisco | Unified Operations Manager | 2.0.1 | — |
| Cisco | Unified Operations Manager | 2.0.2 | — |
| Cisco | Unified Operations Manager | 2.0.3 | — |
| Cisco | Unified Service Monitor | 2.0.1 | — |
References
- http://secunia.com/advisories/42011Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2793Vendor Advisory
- http://secunia.com/advisories/42011Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtmlPatch, Vendor Advisory
- http://www.vupen.com/english/advisories/2010/2793Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3036?
Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.
How severe is CVE-2010-3036?
Severity scoring for CVE-2010-3036 is pending analysis. The EPSS model estimates a 5.99% probability of exploitation in the next 30 days.
How do I fix CVE-2010-3036?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3030Cross-site request forgery (CSRF) vulnerability in Tomaz Mur…
- CVE-2010-3031Buffer overflow in Wyse ThinOS HF 4.4.079i, and possibly oth…
- CVE-2010-3032Integer overflow in the OBGIOPServerWorker::extractHeader fu…
- CVE-2010-3033Cisco Wireless LAN Controller (WLC) software, possibly 4.2 t…
- CVE-2010-3034Cisco Wireless LAN Controller (WLC) software, possibly 6.0.x…
- CVE-2010-3035Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does …7.5
- CVE-2010-3037goform/websXMLAdminRequestCgi.cgi in Cisco Unified Videoconf…
- CVE-2010-3038Cisco Unified Videoconferencing (UVC) System 5110 and 5115, …
- CVE-2010-3039/usr/local/cm/bin/pktCap_protectData in Cisco Unified Commun…
- CVE-2010-3040Multiple stack-based buffer overflows in agent.exe in Setup …
- CVE-2010-3041Multiple buffer overflows in the Cisco WebEx Recording Forma…
- CVE-2010-3042Multiple buffer overflows in the Cisco WebEx Recording Forma…
Are you affected by CVE-2010-3036?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST