CVE-2010-0689

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-02-26 · updated 2026-06-16

Description

The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected products

Datev Base System: all versions

References

http://osvdb.org/62564
http://secunia.com/advisories/38716
http://sotiriu.de/adv/NSOADV-2010-003.txt
http://sotiriu.de/demos/videos/nso-2010-003.html
http://www.datev.de/info-db/1080162
http://www.securityfocus.com/archive/1/509743/100/0/threaded
http://www.securityfocus.com/bid/38415
http://www.vupen.com/english/advisories/2010/0474
https://exchange.xforce.ibmcloud.com/vulnerabilities/56530
http://osvdb.org/62564
http://secunia.com/advisories/38716
http://sotiriu.de/adv/NSOADV-2010-003.txt

Get alerted when CVE-2010-0689 or the next vulnerability affects your stack