CVE-2010-1913

CVE-2010-1913 describes a critical vulnerability in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance products. The flaw stems from an incorrect DNS whitelist in the default pluginlicense.ini configuration, which inadvertently includes the hostnames of numerous personal computers. This misconfiguration allows remote attackers to bypass ActiveX execution restrictions by hosting malicious ActiveX controls on these whitelisted home web servers. With a CVSS score of 9.3 (Critical), this vulnerability presents a significant risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. While the EPSS score is low, indicating a low probability of exploitation, the FAUCET Risk Score of 75/100 still highlights its potential impact. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has also received minimal community discussion and media coverage, suggesting a low level of public awareness or interest.