CVE-2010-3279
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.07%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
- CVSS 2.0
- 7.6 HIGHAV:A/AC:M/Au:N/C:C/I:P/A:C
- EPSS
- 1.07% probability · 63th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-16
- Affected
- alcatel-lucent/ccagent · alcatel-lucent/omnitouch contact center
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/41509Vendor Advisory
- http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdfVendor Advisory
- http://www.nruns.com/_downloads/nruns-SA-2010-001.pdf
- http://www.securityfocus.com/archive/1/513869
- http://www.securityfocus.com/bid/43340
- http://www.vupen.com/english/advisories/2010/2459Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61921
- http://secunia.com/advisories/41509Vendor Advisory
- http://www.alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdfVendor Advisory
- http://www.nruns.com/_downloads/nruns-SA-2010-001.pdf
- http://www.securityfocus.com/archive/1/513869
- http://www.securityfocus.com/bid/43340
- http://www.vupen.com/english/advisories/2010/2459Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/61921
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.