CVE-2010-2306: Medium severity cisco sourcefire 3d2000 sensor vulnerability
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2306?
CVE-2010-2306 is considered a medium severity vulnerability due to its potential for man-in-the-middle attacks.
How do I fix CVE-2010-2306?
To fix CVE-2010-2306, generate and implement unique static SSL keys for each device to prevent SSL traffic decryption.
What devices are affected by CVE-2010-2306?
CVE-2010-2306 affects Sourcefire 3D Sensor models 1000, 2000, and 9900, as well as Defense Center 1000.
What type of attack does CVE-2010-2306 facilitate?
CVE-2010-2306 facilitates man-in-the-middle (MITM) attacks due to the use of static SSL keys across multiple devices.
Is there a workaround for CVE-2010-2306 before applying a full fix?
A temporary workaround for CVE-2010-2306 is to limit access to the device management interfaces and monitor SSL traffic for anomalies.