{"id":"CVE-2007-3010","kind":"vulnerability","aliases":["CVE-2007-3010"],"related":[],"title":"Alcatel OmniPCX Enterprise: Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","description":"masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.","summary":"The masterCGI component in the Unified Maintenance Tool of Alcatel OmniPCX Enterprise communication servers lets remote attackers run arbitrary commands. Exploitation is confirmed in the wild and CISA lists it in the Known Exploited Vulnerabilities catalog.","severity":"critical","cvss":10.0,"epss":0.97385,"exploited":true,"exploited_at":"2022-04-15T00:00:00+00:00","products":[{"name":"Alcatel OmniPCX Enterprise","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["alcatel-omnipcx","exploited","infrastructure","pbx","telephony"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the vendor update per Alcatel-Lucent instructions; the specific fixed version is unknown from the sources.","status":"open","published_at":"2007-09-18T21:17:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:17:48+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:17:48Z","model":"claude-haiku-5-5","output":{"fix":"Apply the vendor update per Alcatel-Lucent instructions; the specific fixed version is unknown from the sources.","reach":"internet","impact":"high","summary":"The masterCGI component in the Unified Maintenance Tool of Alcatel OmniPCX Enterprise communication servers lets remote attackers run arbitrary commands. Exploitation is confirmed in the wild and CISA lists it in the Known Exploited Vulnerabilities catalog.","category":"infrastructure","who_cares":["alcatel-omnipcx","pbx","telephony"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Remote attacker runs arbitrary commands on the telephony server","analyst_note":"Find the vendor advisory and fixed release for Unified Maintenance Tool masterCGI, and whether the management interface is exposed by default; start from the CISA KEV entry.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000478,"input_tokens":2860,"output_tokens":384,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2007':12A,15A '-3010':13A,16A 'action':95C 'alcatel':1A,4A,17A,21B,36B,70C 'alcatel-omnipcx':20B 'allow':78C 'arbitrari':45B,83C 'attack':43B,80C 'catalog':62B 'cisa':54B 'code':8A 'command':46B,84C 'communic':39B,73C 'compon':29B 'confirm':49B 'cve':11A,14A 'earlier':77C 'enterpris':3A,6A,38B,72C 'enterprise':19A 'execut':9A,82C 'exploit':23B,47B,60B 'infrastructur':24B 'known':59B 'let':41B 'list':55B 'mainten':33B,67C 'mastercgi':28B,63C 'metacharact':87C 'omnipcx':2A,5A,18A,22B,37B,71C 'paramet':91C 'pbx':25B 'ping':94C 'r7.1':75C 'remot':7A,42B,79C 'run':44B 'server':40B,74C 'shell':86C 'telephoni':26B 'tool':34B,68C 'unifi':32B,66C 'user':90C 'via':85C 'vulner':10A,61B 'wild':52B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2007-09-18T21:17:00+00:00","kev":{"dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2007-3010","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2007-3010","severity":null,"published_at":"2022-04-15T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T19:35:24+00:00","note":null},{"source":"epss","external_id":"CVE-2007-3010","url":"https://api.first.org/data/v1/epss?cve=CVE-2007-3010","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2007-3010","url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3010","severity":null,"published_at":"2007-09-18T21:17:00+00:00","modified_at":"2026-06-16T22:40:52+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}