CVE-2010-1906: Consona Dynamic Agent

High severity, CVSS 7.2. EPSS: 4% chance of exploitation in the next 30 days.

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.

Affected products

• Consona Consona Dynamic Agent: affected versions not specified
• Consona Consona Repair Manager: any version
• Consona Consona Subscriber Activation: any version
• Consona Consona Subscriber Agent: any version

Published 2010-05-12. Last modified 2026-06-16.