CVE-2010-3040

critical Cisco
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
25.6%
Exploitation probability in 30 days
Top 4% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: November 9, 2010 (5664 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.

CWE

CWE-119

Affected Products

cisco intelligent contact manager

References

🔗 secunia.com 🔗 securitytracker.com 🔗 tools.cisco.com 🔗 www.securityfocus.com 🔗 www.vupen.com