masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Project Subscriptions

Vendors Products
Al-enterprise Subscribe
Omnipcx Enterprise Communication Server Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 22 Oct 2025 01:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Fri, 07 Feb 2025 15:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-77
Metrics kev

{'dateAdded': '2022-04-15'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-10-22T00:05:56.419Z

Reserved: 2007-06-04T00:00:00.000Z

Link: CVE-2007-3010

cve-icon Vulnrichment

Updated: 2024-08-07T13:57:54.983Z

cve-icon NVD

Status : Deferred

Published: 2007-09-18T21:17:00.000

Modified: 2025-10-22T01:15:32.770

Link: CVE-2007-3010

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses