Cisco Ciscoworks Internetwork Performance Monitor vulnerabilities

2 CVEs affecting Cisco Ciscoworks Internetwork Performance Monitor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0138, published 2010-01-21.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-1157, published 2008-03-14. High severity, CVSS 10.0. EPSS: 20.7% chance of exploitation in the next 30 days. Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute…
• CVE-2010-0138, published 2010-01-21. High severity, CVSS 10.0. EPSS: 8.5% chance of exploitation in the next 30 days. Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute…