CVE-2010-1906 Other in n/a

What is CVE-2010-1906?

CVE-2010-1906 is a high-severity vulnerability in n/a, published on 11 May 2010. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.

Weakness: CWE-310

Which versions are affected by CVE-2010-1906?

It affects 4 products.

Products include Consona Consona Dynamic Agent, Consona Consona Repair Manager, Consona Consona Subscriber Activation, Consona Consona Subscriber Agent.

How do I fix CVE-2010-1906?

No fix has been published for CVE-2010-1906 yet. Limit exposure of the affected software until one is available.

Is CVE-2010-1906 being exploited?

There is no known exploitation of CVE-2010-1906 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2010-1908 Code injection in n/a Critical 9.3
• CVE-2010-1911 Security feature bypass in n/a Critical 9.3
• CVE-2010-1912 Security feature bypass in n/a Critical 9.3
• CVE-2010-1913 Security feature bypass in n/a Critical 9.3
• CVE-2010-1909 Memory corruption in n/a High 7.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vwjv-28f3-j79g.