{"vulnerability": "CVE-2007-3010", "sightings": [{"uuid": "0354438c-8715-4417-89e9-f3d442f46892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:02.000000Z"}, {"uuid": "7c63ce72-3b00-4048-a328-8ff9f0495781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971520", "content": "", "creation_timestamp": "2024-12-24T20:30:34.190280Z"}, {"uuid": "be974a00-7480-4945-97be-2b54252ec845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:38.000000Z"}, {"uuid": "e7d273ec-b12d-45a6-8eba-59f89216856c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:58.000000Z"}, {"uuid": "2d9a3f81-3f56-4692-9390-3741b7a5862d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:23.000000Z"}, {"uuid": "53c8fd6a-86dc-4514-a7e1-f49793f721ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/alcatel_omnipcx_mastercgi_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5b8e26fd-ac29-48d1-ba9d-279868dd52cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2007-3010", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cf0285ad-d795-4641-87f9-f9446c203241", "content": "", "creation_timestamp": "2026-02-02T12:27:50.898716Z"}, {"uuid": "de2781f2-f2ec-4d27-896b-685b745d6a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2007-3010", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16857", "content": "", "creation_timestamp": "2010-10-05T00:00:00.000000Z"}, {"uuid": "bbaff63f-da58-4539-9352-04b77e331407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "https://t.me/arpsyndicate/1357", "content": "#ExploitObserverAlert\n\nCVE-2007-3010\n\nDESCRIPTION: Exploit Observer has 10 entries related to CVE-2007-3010. masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.\n\nFIRST-EPSS: 0.972640000\nNVD-IS: 10.0\nNVD-ES: 10.0", "creation_timestamp": "2023-12-05T01:35:51.000000Z"}, {"uuid": "dcfd368d-b398-47c1-917a-acff72ebe25c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/46266c24-4569-408f-b5c0-7418e0ca33ae", "content": "", "creation_timestamp": "2026-06-19T12:47:18.103612Z"}, {"uuid": "9f3fb59d-5903-4874-88fd-832c4e673243", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ce9e0eb6-fc19-463a-be54-995887af238f", "content": "", "creation_timestamp": "2026-06-23T14:05:19.295741Z"}, {"uuid": "ea28b4ab-3685-40c0-bab6-25ff09aa3ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "content": "", "creation_timestamp": "2026-07-16T12:15:03.220885Z"}, {"uuid": "2b90eea3-dbde-4b5c-992a-34c0a5f32c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-3010", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/alcatel_omnipcx_mastercgi_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"aushack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module abuses a metacharacter injection vulnerability in the\\n          HTTP management interface of the Alcatel-Lucent OmniPCX Enterprise\\n          Communication Server 7.1 and earlier. The Unified Maintenance Tool\\n          contains a 'masterCGI' binary which allows an unauthenticated attacker\\n          to execute arbitrary commands by specifying shell metacharaters as the\\n          'user' within the 'ping' action to obtain 'httpd' user access. This\\n          module only supports command line payloads, as the httpd process kills\\n          the reverse/bind shell spawn after the HTTP 200 OK response.\", \"disclosure_date\": \"2007-09-09\", \"fullname\": \"exploit/linux/http/alcatel_omnipcx_mastercgi_exec\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Alcatel-Lucent OmniPCX Enterprise masterCGI Arbitrary Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/alcatel_omnipcx_mastercgi_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/alcatel_omnipcx_mastercgi_exec\", \"references\": [\"OSVDB-40521\", \"BID-25694\", \"CVE-2007-3010\", \"URL-http://www1.alcatel-lucent.com/psirt/statements/2007002/OXEUMT.htm\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:20.708232Z"}]}