CVE-2010-0589

2010-04-1517:30:00

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0.127

Percentile

95.5%

JSON

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

Affected configurations

Nvd

Node

ciscosecure_desktopRange≤3.5

ciscosecure_desktopMatch3.1

ciscosecure_desktopMatch3.1.1

ciscosecure_desktopMatch3.1.1.27

ciscosecure_desktopMatch3.1.1.33

ciscosecure_desktopMatch3.2

ciscosecure_desktopMatch3.2.1

ciscosecure_desktopMatch3.3

ciscosecure_desktopMatch3.4

ciscosecure_desktopMatch3.4.1

ciscosecure_desktopMatch3.4.2

ciscosecure_desktopMatch3.4.2048

VendorProductVersionCPE
ciscosecure_desktop*cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*
ciscosecure_desktop3.1cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*
ciscosecure_desktop3.1.1cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*
ciscosecure_desktop3.1.1.27cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*
ciscosecure_desktop3.1.1.33cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*
ciscosecure_desktop3.2cpe:2.3:a:cisco:secure_desktop:3.2:*:*:*:*:*:*:*
ciscosecure_desktop3.2.1cpe:2.3:a:cisco:secure_desktop:3.2.1:*:*:*:*:*:*:*
ciscosecure_desktop3.3cpe:2.3:a:cisco:secure_desktop:3.3:*:*:*:*:*:*:*
ciscosecure_desktop3.4cpe:2.3:a:cisco:secure_desktop:3.4:*:*:*:*:*:*:*
ciscosecure_desktop3.4.1cpe:2.3:a:cisco:secure_desktop:3.4.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	secure_desktop	*	cpe:2.3:a:cisco:secure_desktop::::::::
cisco	secure_desktop	3.1	cpe:2.3:a:cisco:secure_desktop:3.1:::::::*
cisco	secure_desktop	3.1.1	cpe:2.3:a:cisco:secure_desktop:3.1.1:::::::*
cisco	secure_desktop	3.1.1.27	cpe:2.3:a:cisco:secure_desktop:3.1.1.27:::::::*
cisco	secure_desktop	3.1.1.33	cpe:2.3:a:cisco:secure_desktop:3.1.1.33:::::::*
cisco	secure_desktop	3.2	cpe:2.3:a:cisco:secure_desktop:3.2:::::::*
cisco	secure_desktop	3.2.1	cpe:2.3:a:cisco:secure_desktop:3.2.1:::::::*
cisco	secure_desktop	3.3	cpe:2.3:a:cisco:secure_desktop:3.3:::::::*
cisco	secure_desktop	3.4	cpe:2.3:a:cisco:secure_desktop:3.4:::::::*
cisco	secure_desktop	3.4.1	cpe:2.3:a:cisco:secure_desktop:3.4.1:::::::*