CVE-2010-4304

The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI)…

published November 22, 2010

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01173 · 67.0th percentile
Published
2010-11-22T19:00Z
EPSS history
Timeline
  • 22 NOV 19:00Z
    The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI)…
    cvelistv5