CVE-2010-3040: Cisco Intelligent Contact Manager

High severity, CVSS 10.0. EPSS: 8% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.

Affected products

• Cisco Intelligent Contact Manager: up to and including 6.0\(0\)a\(1\); version 5.0 only; version 5.0(0) only; version 5.0(0)_sr2 only; version 5.0(0)_sr3 only; version 5.0(0)_sr4 only; …

Published 2010-11-09. Last modified 2026-06-16.