CVE-2010-4304 in Unified Videoconferencing System 3527 Primary Rate Interface Gateway信息

摘要

由 VulDB • 2026-07-05

Cisco Unified Videoconferencing (UVC) System 3545、5110、5115 和 5230；Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway；Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway；以及 Unified Videoconferencing 3515 Multipoint Control Unit (MCU) 的 Web 界面使用基于时间值的可预测会话 ID，这使得远程攻击者能够通过暴力破解攻击更容易地劫持会话。此问题也被称为 Bug ID CSCti54048。

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2010-11-22

披露

2010-11-22

管理

已接受

条目

VDB-55533

CPE

准备好

CWE

CWE-310 (已确认)

CVSS

6.5 (VulDB)

EPSS

0.01196

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2010-4304
NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-4304
CVE Details	https://www.cvedetails.com/cve/CVE-2010-4304/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!