The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1...
Vulnerability Description
The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-0689
Credits & Attribution
No credits recorded in the NVD database.
References
- http://sotiriu.de/demos/videos/nso-2010-003.html
- http://www.securityfocus.com/bid/38415
- http://osvdb.org/62564
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56530
- http://www.vupen.com/english/advisories/2010/0474
- http://www.securityfocus.com/archive/1/509743/100/0/threaded
- http://sotiriu.de/adv/NSOADV-2010-003.txt
- http://www.datev.de/info-db/1080162
- http://secunia.com/advisories/38716
Affected Vendor
datev
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.