VULNERABILITY INTELLIGENCE

CVE-2010-3223

CVSS score7.5 HIGH
EPSS probability12.75%
CISA KEVNot currently listed
Published2010-10-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."

Primary references