CVE-2010-3122
Last modified
CVE-2010-3122 is a vulnerability of currently unknown severity. The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network.. EPSS estimates a 1.38% chance of exploitation in the next 30 days.
Description
The DevonIT thin-client management tool relies on a shared secret for authentication but transmits the secret in cleartext, which makes it easier for remote attackers to discover the secret value, and consequently obtain administrative control over client machines, by sniffing the network.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Devonit | Thin-Client Management Tool | All versions |
References
- http://www.kb.cert.org/vuls/id/278785US Government Resource
- http://www.kb.cert.org/vuls/id/278785US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3122?
How severe is CVE-2010-3122?
How do I fix CVE-2010-3122?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3116Multiple use-after-free vulnerabilities in WebKit, as used i…
- CVE-2010-3117Google Chrome before 5.0.375.127 does not properly implement…
- CVE-2010-3118The autosuggest feature in the Omnibox implementation in Goo…
- CVE-2010-3119Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 …
- CVE-2010-3120Google Chrome before 5.0.375.127 does not properly implement…
- CVE-2010-3121Buffer overflow in tm-console-bin in the DevonIT thin-client…
- CVE-2010-3124Untrusted search path vulnerability in bin/winvlc.c in VLC M…
- CVE-2010-3125Untrusted search path vulnerability in TeamMate Audit Manage…
- CVE-2010-3126Untrusted search path vulnerability in avast! Free Antivirus…
- CVE-2010-3127Untrusted search path vulnerability in Adobe PhotoShop CS2 t…
- CVE-2010-3128Untrusted search path vulnerability in TeamViewer 5.0.8703 a…
- CVE-2010-3129Untrusted search path vulnerability in uTorrent 2.0.3 and ea…
Are you affected by CVE-2010-3122?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST