CVE-2010-3279
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA)...
CVE-2010-3279 is a high vulnerability (CVSS 7.6) in Alcatel-lucent Ccagent, published September 23, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.07%, the 65th percentile. No source names a fixed version.
- Severity
- 7.6 HighCVSS 2.0, NVD
- Exploit chance
- 1.07%EPSS, 65th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
Exploit likelihood
Affected products
What each source reports
NVD Score used
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
- Record
CVE-2010-3279- CVSS 2.0
- 7.6 High
AV:A/AC:M/Au:N/C:C/I:P/A:C - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE ListNo score
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
- Record
CVE-2010-3279- Updated
- 2026-11-02
EUVDEUVD-2010-3278No score
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
- Record
EUVD-2010-3278- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53gq-qw8x-rqhqNo score
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA)...
The default configuration of the CCAgent option before 9.0.8.4 in the management server (aka TSA) component in Alcatel-Lucent OmniTouch Contact Center Standard Edition enables maintenance access, which allows remote attackers to monitor or reconfigure Contact Center operations via vectors involving TSA_maintenance.exe.
- Record
GHSA-53gq-qw8x-rqhq- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/archive/1/513869
alcatel-lucent.com/wps/DocumentStreamerServlet?LMSG_CABINET=Corporate&LMSG_CONTENT_FILE=Support/Security/2010001.pdf
exchange.xforce.ibmcloud.com/vulnerabilities/61921
vupen.com/english/advisories/2010/2459
nruns.com/_downloads/nruns-SA-2010-001.pdf
secunia.com/advisories/41509
nvd.nist.gov/vuln/detail/CVE-2010-3279
github.com/advisories/GHSA-53gq-qw8x-rqhq