ACTIVELY EXPLOITED
CVE-2007-3010: Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
| Vendor | Alcatel |
|---|---|
| Product | OmniPCX Enterprise |
| Actively exploited | Yes |
| Added to CISA KEV | 15 Apr 2022 |
| CISA federal deadline | 6 May 2022 |
| Weakness (CWE) | CWE-20 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands.
SOURCES
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.