VulnerabilityAnalyzed

CVE-2007-3010

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

KEVCRITICAL 9.8EPSS 97.4%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 6 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 97.41% probability · 100th percentile
CISA KEV: Listed 15 April 2022 · due 6 May 2022
Weakness: CWE-77
Affected: al-enterprise/omnipcx enterprise communication server
Source: cve@mitre.org

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2007-3010

References

http://marc.info/?l=full-disclosure&m=119002152126755&w=2Exploit, Mailing List
http://osvdb.org/40521Broken Link
http://secunia.com/advisories/26853Broken Link, Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.phpBroken Link
http://www.securityfocus.com/archive/1/479699/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25694Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3185Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htmBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632Third Party Advisory, VDB Entry
http://marc.info/?l=full-disclosure&m=119002152126755&w=2Exploit, Mailing List
http://osvdb.org/40521Broken Link
http://secunia.com/advisories/26853Broken Link, Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.phpBroken Link
http://www.securityfocus.com/archive/1/479699/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25694Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3185Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htmBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.