CVE-2010-1906
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation,...
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
Exploit likelihood
What each source reports
NVD Score used
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
- Record
CVE-2010-1906- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
- Record
CVE-2010-1906- Updated
- 2026-11-02
EUVDEUVD-2010-1925 No score
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
- Record
EUVD-2010-1925- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vwjv-28f3-j79g No score
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation,...
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
- Record
GHSA-vwjv-28f3-j79g- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1906 is a high vulnerability (CVSS 7.2) in Consona Dynamic Agent, published May 11, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.03%, the 90th percentile. No source names a fixed version.
References
secunia.com/advisories/39752
kb.cert.org/vuls/id/602801
wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
wintercore.com/downloads/rootedcon_0day.pdf
securityfocus.com/archive/1/511176/100/0/threaded
consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
nvd.nist.gov/vuln/detail/CVE-2010-1906
github.com/advisories/GHSA-vwjv-28f3-j79g