{"cve":"CVE-2010-4304","nvd":{"published":"2010-11-22T20:00:04.307","modified":"2026-06-16T23:24:32.183","status":"Modified","description":"The web interface in Cisco Unified Videoconferencing (UVC) System 3545, 5110, 5115, and 5230; Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway; Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway; and Unified Videoconferencing 3515 Multipoint Control Unit (MCU) uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack, aka Bug ID CSCti54048.","cvss_v4":null,"cvss_v3":null,"cwes":["CWE-310"],"references":["http://seclists.org/fulldisclosure/2010/Nov/167","http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html","http://www.trustmatta.com/advisories/MATTA-2010-001.txt","http://seclists.org/fulldisclosure/2010/Nov/167","http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html"],"products":["cisco:unified_videoconferencing_system_3515_multipoint_control_unit","cisco:unified_videoconferencing_system_3515_multipoint_control_unit_firmware","cisco:unified_videoconferencing_system_3522_basic_rate_interface_gateway","cisco:unified_videoconferencing_system_3522_basic_rate_interface_gateway_firmware","cisco:unified_videoconferencing_system_3527_primary_rate_interface_gateway","cisco:unified_videoconferencing_system_3527_primary_rate_interface_gateway_firmware","cisco:unified_videoconferencing_system_3545","cisco:unified_videoconferencing_system_3545_firmware","cisco:unified_videoconferencing_system_5110","cisco:unified_videoconferencing_system_5110_firmware","cisco:unified_videoconferencing_system_5115","cisco:unified_videoconferencing_system_5115_firmware","cisco:unified_videoconferencing_system_5230","cisco:unified_videoconferencing_system_5230_firmware"],"source":"nvd","synced_at":"2026-10-19T19:57:56.749847046+00:00"},"epss":{"cve":"CVE-2010-4304","score":0.01173,"percentile":0.67478,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}