Unrated severityNVD Advisory· Published Jun 16, 2010· Updated Apr 29, 2026
CVE-2010-2306
CVE-2010-2306
Description
The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the same static, private SSL keys for multiple devices and installations, which allows remote attackers to decrypt SSL traffic via a man-in-the-middle (MITM) attack.
Affected products
4- cpe:2.3:h:sourcefire:3d1000:*:*:*:*:*:*:*:*
- cpe:2.3:h:sourcefire:3d2000:*:*:*:*:*:*:*:*
- cpe:2.3:h:sourcefire:3d9900:*:*:*:*:*:*:*:*
- cpe:2.3:h:sourcefire:dc1000:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- secunia.com/advisories/40143nvdVendor Advisory
- www.vupen.com/english/advisories/2010/1438nvdVendor Advisory
- osvdb.org/65470nvd
- www.securityfocus.com/archive/1/511792/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.zerodayinitiative.com/advisories/ZDI-10-107/nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/59380nvd
- support.sourcefire.com/notices/notice/1437nvd
News mentions
0No linked articles in our index yet.