CVE-2010-4303
Last modified
CVE-2010-4303 is a vulnerability of currently unknown severity. Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Unified Videoconferencing System 5110 Firmware | 7.0.1.13.3 |
| Cisco | Unified Videoconferencing System 5115 Firmware | 7.0.1.13.3 |
| Cisco | Unified Videoconferencing System 5110 | All versions |
| Cisco | Unified Videoconferencing System 5115 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-4303?
How severe is CVE-2010-4303?
How do I fix CVE-2010-4303?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-4297The VMware Tools update functionality in VMware Workstation …
- CVE-2010-4298SQL injection vulnerability in the download module in Free S…
- CVE-2010-4299Heap-based buffer overflow in ZfHIPCND.exe in Novell Zenwork…
- CVE-2010-4300Heap-based buffer overflow in the dissect_ldss_transfer func…
- CVE-2010-4301epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissecto…
- CVE-2010-4302/opt/rv/Versions/CurrentVersion/Mcu/Config/Mcu.val in Cisco …
- CVE-2010-4304The web interface in Cisco Unified Videoconferencing (UVC) S…
- CVE-2010-4305Cisco Unified Videoconferencing (UVC) System 3545, 5110, 511…
- CVE-2010-4306Adobe Shockwave Player before 11.5.9.620 allows attackers to…
- CVE-2010-4307Buffer overflow in Adobe Shockwave Player before 11.5.9.620 …
- CVE-2010-4308Adobe Shockwave Player before 11.6.1.629 allows attackers to…
- CVE-2010-4309Adobe Shockwave Player before 11.6.1.629 allows attackers to…
Are you affected by CVE-2010-4303?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST