CVE-2007-3010

Published Sep 18, 2007 CVSS 3.1 · 9.8 Critical EPSS 97.4% KEV · Listed
Description
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Weaknesses CWE-77
Metrics kev

{'dateAdded': '2022-04-15'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 22, 2025, 12:05 AM
Reserved
Jun 4, 2007, 12:00 AM
Status
Analyzed
Published
Sep 18, 2007, 9:17 PM
Modified
Jun 16, 2026, 10:40 PM