CVE-2007-3010

nvd.nist.gov • August 18, 2026

masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the user parameter during a ping action.

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Enable Remote Command Execution on Vulnerable Routers and Servers Two critical vulnerabilities have been identified that allow remote attackers to execute arbitrary commands. CVE-2016-6277 affects various NETGEAR routers, including R6250, R6400, and R7000, allowing exploitation through shell metacharacters in the path info to cgi-bin. CVE-2007-3010 impacts Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier, enabling similar command execution via the user parameter during a ping action. Both vulnerabilities have been added to the CISA Known Exploited Vulnerabilities Catalog, indicating active exploitation. Users of the affected systems are advised to consult the CISA guidance for remediation steps. The vulnerabilities pose significant risks to network security and operational integrity. 73

Extracted Entities

CVE-2007-3010

The full story

Extracted Entities

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)