What’s Vulnerable › Vulnerabilities

CVE-2010-3036

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-10-29 · updated 2026-06-16
• Weakness: CWE-119

Description

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Affected products

• Ciscoworks Common Services: 3.0.5, 3.0.6, 3.1, 3.1.1, 3.2, 3.3
• Ciscoworks Lan Management Solution: 2.6-update, 3.0, 3.0-december_2007, 3.1, 3.2
• Cisco Qos Policy Manager: 4.0, 4.0.1, 4.0.2
• Cisco Security Manager: 3.0.2, 3.2
• Cisco Telepresence Readiness Assessment Manager: 1.0
• Cisco Unified Operations Manager: 2.0.1, 2.0.2, 2.0.3
• Cisco Unified Service Monitor: 2.0.1

References

• http://osvdb.org/68927
• http://secunia.com/advisories/42011
• http://securitytracker.com/id?1024646
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
• http://www.securityfocus.com/bid/44468
• http://www.vupen.com/english/advisories/2010/2793
• http://osvdb.org/68927
• http://secunia.com/advisories/42011
• http://securitytracker.com/id?1024646
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
• http://www.securityfocus.com/bid/44468
• http://www.vupen.com/english/advisories/2010/2793

Get alerted when CVE-2010-3036 or the next vulnerability affects your stack