CVE-2010-2306

CVE-2010-2306 describes a vulnerability in Sourcefire 3D Sensor and Defense Center products where default installations utilize identical static SSL keys across multiple devices. This flaw enables remote attackers to decrypt SSL traffic through a man-in-the-middle attack, leading to potential compromise of confidentiality and integrity. With a CVSS score of 4.3, this vulnerability has a network attack vector and medium attack complexity, requiring physical proximity to the network. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.