VULNERABILITY INTELLIGENCE

CVE-2007-3010

CVSS score9.8 CRITICAL
EPSS probability97.39%
CISA KEVKnown exploited vulnerability
Published2007-09-18
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability

Vendor / product: Alcatel / OmniPCX Enterprise

Description

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Weakness classification

  • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

Primary references