« Volver al listado

CVE-2010-0573

Estado: ModificadaAlta (8.5)—

Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data for a display via unknown vectors, related to a "content injection" issue, aka Bug ID CSCtc46024.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cisco — Digital Media PlayerCisco — Digital Media Player 4300gCisco — Digital Media Player 4305gCisco — Digital Media Player 4400g

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0573",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 8.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:C",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 7.8,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-05T19:30:00.720",
  "references": [
    {
      "url": "http://osvdb.org/62723",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/38799",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1023672",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b925.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38504",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0532",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56639",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://osvdb.org/62723",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38799",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1023672",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b925.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38504",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0532",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56639",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability on the Cisco Digital Media Player before 5.2 allows remote attackers to hijack the source of (1) video or (2) data for a display via unknown vectors, related to a \"content injection\" issue, aka Bug ID CSCtc46024."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en Cisco Digital Media Player en versiones anteriores a v5.2 permite a atacantes remotos secuestrar la fuente de (1) video o (2) datos a mostrar a traves de vectores desconocidos relacionados con \"inyeccion de contenido\", tambien conocido bug ID CSCtc46024."
    }
  ],
  "lastModified": "2026-06-16T23:16:25.890",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:digital_media_player:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D819D9D-FE26-4BBA-8149-A088A8CECAE7"
            },
            {
              "criteria": "cpe:2.3:h:cisco:digital_media_player_4300g:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AB274A8-F813-4888-9874-8C8DE473761F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:digital_media_player_4305g:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5371EB55-695E-43FA-ABD2-AC47190AE7DC"
            },
            {
              "criteria": "cpe:2.3:h:cisco:digital_media_player_4400g:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90755E82-22E4-4D2E-B8A6-1DF8F6D88EC9"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorImpact": "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b925.shtml\r\n\r\n\" Vulnerable Products\r\n\r\nCisco Digital Media Player versions earlier than 5.2 are affected by this vulnerability\"",
  "sourceIdentifier": "psirt@cisco.com"
}