CVE-2010-0138
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (8.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 8.48% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- cisco/ciscoworks internetwork performance monitor
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/38230Vendor Advisory
- http://securitytracker.com/id?1023484
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtmlVendor Advisory
- http://www.securityfocus.com/bid/37879
- http://www.vupen.com/english/advisories/2010/0184Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-004/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55768
- http://secunia.com/advisories/38230Vendor Advisory
- http://securitytracker.com/id?1023484
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtmlVendor Advisory
- http://www.securityfocus.com/bid/37879
- http://www.vupen.com/english/advisories/2010/0184Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-004/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55768
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.