CVE-2010-1911: Consona Live Assistance vulnerability
Consona · Consona Live Assistance
Affected: Consona Live Assistance · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 88% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a DNS hijacking attack.
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2010-1911 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.
References
- NVD entrynvd.nist.gov
- CVE recordcve.org
- Weakness CWE-310cwe.mitre.org
- Third-party advisorykb.cert.org
- wintercore.com/en/component/content/article/7-media/18-wintercorwintercore.com
- wintercore.com/downloads/rootedcon_0day.pdfwintercore.com
- exchange.xforce.ibmcloud.com/vulnerabilities/58608exchange.xforce.ibmcloud.com
- consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdfconsona.com
- Mailing listsecurityfocus.com