CVE-2010-0138

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-01-21 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.

Affected products

Ciscoworks Internetwork Performance Monitor: through 2.6; 2.4, 2.5

References

http://secunia.com/advisories/38230
http://securitytracker.com/id?1023484
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml
http://www.securityfocus.com/bid/37879
http://www.vupen.com/english/advisories/2010/0184
http://www.zerodayinitiative.com/advisories/ZDI-10-004/
https://exchange.xforce.ibmcloud.com/vulnerabilities/55768
http://secunia.com/advisories/38230
http://securitytracker.com/id?1023484
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml
http://www.securityfocus.com/bid/37879
http://www.vupen.com/english/advisories/2010/0184

Get alerted when CVE-2010-0138 or the next vulnerability affects your stack