VULNERABILITY INTELLIGENCE

CVE-2010-0589

CVSS score9.3 HIGH
EPSS probability4.76%
CISA KEVNot currently listed
Published2010-04-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references