CVE-2010-3036: Cisco Ciscoworks Common Services

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

Multiple buffer overflows in the authentication functionality in the web-server module in Cisco CiscoWorks Common Services before 4.0 allow remote attackers to execute arbitrary code via a session on TCP port (1) 443 or (2) 1741, aka Bug ID CSCti41352.

Affected products

• Cisco Ciscoworks Common Services: version 3.0.5 only; version 3.0.6 only; version 3.1 only; version 3.1.1 only; version 3.2 only; version 3.3 only
• Cisco Ciscoworks Lan Management Solution: version 2.6 only; version 3.0 only; version 3.1 only; version 3.2 only
• Cisco Qos Policy Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only
• Cisco Security Manager: version 3.0.2 only; version 3.2 only
• Cisco Telepresence Readiness Assessment Manager: version 1.0 only
• Cisco Unified Operations Manager: version 2.0.1 only; version 2.0.2 only; version 2.0.3 only
• Cisco Unified Service Monitor: version 2.0.1 only

Published 2010-10-29. Last modified 2026-06-16.