CVE-2010-3040

CVE-2010-3040 describes multiple stack-based buffer overflows in the agent.exe component of Cisco Intelligent Contact Manager (ICM) Setup Manager versions prior to 7.0. These vulnerabilities allow remote, unauthenticated attackers to execute arbitrary code on affected systems by sending specially crafted TCP packets with overly long parameters to specific functions. The vulnerability carries a critical CVSS score of 10.0, indicating maximum severity. Its attack vector is network-based with low attack complexity, requiring no authentication, and can lead to complete compromise of confidentiality, integrity, and availability. The FAUCET Risk Score is 96/100, further emphasizing its critical nature. Despite its high severity, there is no evidence of active exploitation (KEV: No), nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting a lack of widespread attention or public awareness regarding this specific vulnerability.