« Volver al listado

CVE-2009-4510

Estado: ModificadaAlta (8.5)—

The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Vsecurity — Tandberg Video Communication Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2009-4510",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-04-13T17:30:00.430",
  "references": [
    {
      "url": "http://ftp.tandberg.com/pub/software/vcs/TANDBERG%20Video%20Communication%20Server%20Software%20Release%20Notes%20%28X5%29.pdf",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/39275",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vsecurity.com/resources/advisory/20100409-2",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://ftp.tandberg.com/pub/software/vcs/TANDBERG%20Video%20Communication%20Server%20Software%20Release%20Notes%20%28X5%29.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39275",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vsecurity.com/resources/advisory/20100409-2",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-310"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote attackers to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets."
    },
    {
      "lang": "es",
      "value": "El servicio SSH en TANDBERG Video Communication Server (VCS) anteriores a X5.1 utiliza una clave DSA fija, lo que hace mas facil a atacantes remotos dirigir un ataque de man-in-the-middle y falsificar servidores de forma arbitraria a través de paquetes SSH manipulados."
    }
  ],
  "lastModified": "2026-06-16T23:13:47.683",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89FFA295-71DD-404B-B0BD-BACE4067FE78",
              "versionEndIncluding": "x5.0.0"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x1.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD845299-1563-4F0D-9535-D42C150D42EA"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x1.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2560948-EA31-4EE2-8035-6FD0D9A295E4"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BEEBBF98-A7D3-4B92-AABE-4177F42A1E83"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x2.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B209998-E7EE-45E9-BC6F-09091054205B"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x2.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB566D9B-D126-48FE-B525-B058980C2AD4"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC5BD0E6-B3FB-42BC-843B-EC295159D57A"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3FEB83A-4F75-4604-8B49-E6566307144D"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x4.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9C032A1B-06DC-4942-AD7F-E411B56C2818"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x4.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB1726EA-F8AE-4B32-BE07-56071573B0DC"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x4.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DBB23A32-4457-4323-BFEE-79B134E96762"
            },
            {
              "criteria": "cpe:2.3:a:vsecurity:tandberg_video_communication_server:x4.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF5F36BF-0411-49E3-B06A-D0E6F074733C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}