VULNERABILITY INTELLIGENCE

CVE-2010-2306

CVSS score4.3 MEDIUM
EPSS probability1.46%
CISA KEVNot currently listed
Published2010-06-16
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:N/C:P/I:P/A:N

Description

The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.

Primary references