CVE-2010-4305 in Unified Videoconferencing System 3527 Primary Rate Interface Gateway信息

摘要

由 VulDB • 2026-06-25

Cisco Unified Videoconferencing (UVC) System 3545、5110、5115 和 5230；Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway；Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway；以及 Unified Videoconferencing 3515 Multipoint Control Unit (MCU）错误地使用 cookie 来存储 Web 界面凭据，这允许远程攻击者通过读取（1）明文或（2）base64 编码的明文字符串形式的 cookie 来获取敏感信息。即 Bug ID CSCti54052。

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2010-11-22

披露

2010-11-22

管理

已接受

条目

VDB-55534

CPE

准备好

CWE

CWE-310 (已确认)

CVSS

5.3 (VulDB)

EPSS

0.01229

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2010-4305
NVD	https://nvd.nist.gov/vuln/detail/CVE-2010-4305
CVE Details	https://www.cvedetails.com/cve/CVE-2010-4305/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!