VulnerabilityAnalyzed

CVE-2007-3010

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

KEVEXPLOIT ×3 ✓CRITICAL 9.8EPSS 97.4%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 6 May 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 97.39% probability · 100th percentile
Public exploits: 3 in Exploit-DB · verified · first 17 September 2007
CISA KEV: Listed 15 April 2022 · due 6 May 2022
Weakness: CWE-77
Affected: al-enterprise/omnipcx enterprise communication server
Source: cve@mitre.org

EPSS trend

EPSS 97.4% since 30 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2007-3010

Public exploits (3)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-16857 source ↗	Alcatel-Lucent OmniPCX Enterprise - masterCGI Arbitrary Command Execution (Metasploit)cgi · Metasploit	webapps	5 October 2010	yes
EDB-30591 source ↗	Alcatel-Lucent OmniPCX Enterprise 7.1 - Remote Command Executioncgi · RedTeam Pentesting GmbH	webapps	17 September 2007	yes
EDB-10031 source ↗	Alcatel-Lucent OmniPCX Enterprise Communication Server 7.1 - masterCGI Command Injection (Metasploit)cgi · patrick	webapps	17 September 2007	yes

References

http://marc.info/?l=full-disclosure&m=119002152126755&w=2Exploit, Mailing List
http://osvdb.org/40521Broken Link
http://secunia.com/advisories/26853Broken Link, Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.phpBroken Link
http://www.securityfocus.com/archive/1/479699/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25694Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3185Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htmBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632Third Party Advisory, VDB Entry
http://marc.info/?l=full-disclosure&m=119002152126755&w=2Exploit, Mailing List
http://osvdb.org/40521Broken Link
http://secunia.com/advisories/26853Broken Link, Vendor Advisory
http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.phpBroken Link
http://www.securityfocus.com/archive/1/479699/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/25694Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3185Broken Link
http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htmBroken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/36632Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.