{"id":"CVE-2007-3010","aliases":[],"url":"https://o3.security/vulnerability/CVE-2007-3010","summary":"masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters…","details":"masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.","published":"2007-09-18T21:17:00.000","modified":"2026-06-16T22:40:52.660","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.97407,"percentile":0.99893,"asOf":"2026-08-25"},"cisaKev":{"dateAdded":"2022-04-15","dueDate":"2022-05-06","knownRansomwareCampaignUse":false},"exploitsKnown":6,"affectedPackages":[],"fix":null,"references":[{"type":"EXPLOIT","url":"http://marc.info/?l=full-disclosure&m=119002152126755&w=2"},{"type":"WEB","url":"http://osvdb.org/40521"},{"type":"ADVISORY","url":"http://secunia.com/advisories/26853"},{"type":"WEB","url":"http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php"},{"type":"ADVISORY","url":"http://www.securityfocus.com/archive/1/479699/100/0/threaded"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/25694"},{"type":"WEB","url":"http://www.vupen.com/english/advisories/2007/3185"},{"type":"WEB","url":"http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm"},{"type":"ADVISORY","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36632"},{"type":"EXPLOIT","url":"http://marc.info/?l=full-disclosure&m=119002152126755&w=2"},{"type":"WEB","url":"http://osvdb.org/40521"},{"type":"ADVISORY","url":"http://secunia.com/advisories/26853"},{"type":"WEB","url":"http://www.redteam-pentesting.de/advisories/rt-sa-2007-001.php"},{"type":"ADVISORY","url":"http://www.securityfocus.com/archive/1/479699/100/0/threaded"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/25694"},{"type":"WEB","url":"http://www.vupen.com/english/advisories/2007/3185"},{"type":"WEB","url":"http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm"},{"type":"ADVISORY","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36632"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2007-3010"}],"provenance":{"sources":["OSV.dev","NVD","CISA KEV","FIRST.org (EPSS)"],"lastVerified":"2026-06-16T22:40:52.660"}}