CVE-2010-0138: Cisco Ciscoworks Internetwork Performance Monitor

High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days.

Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a "third-party component," aka Bug ID CSCsv62350.

Affected products

• Cisco Ciscoworks Internetwork Performance Monitor: up to and including 2.6; version 2.4 only; version 2.5 only

Published 2010-01-21. Last modified 2026-06-16.