CVE-2007-3010

Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score30.5500%

EPSS Percentile93.27th

Published2007年9月18日

Last Modified2026年4月21日

Vulnerability Description

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Affected Platforms (CPE)

📦

Al Enterprise

Omnipcx Enterprise Communication Server

<= 7.1

References & Advisories

🔗 http://marc.info/?l=full-disclosure&m=119002152126755&w=2

🔗 http://osvdb.org/40521

🔗 http://secunia.com/advisories/26853

🔗 http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php

🔗 http://www.securityfocus.com/archive/1/479699/100/0/threaded

🔗 http://www.securityfocus.com/bid/25694

🔗 http://www.vupen.com/english/advisories/2007/3185

🔗 http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm

Vulnerability Description

Affected Platforms (CPE)

Omnipcx Enterprise Communication Server

References & Advisories

相關漏洞威脅