CVE-2010-0103

CRITIQUE 9.3CVE-2010-0103 · Published 10/03/2010 · updated 16/06/2026

En bref

CVE-2010-0103 est une vulnérabilité CRITIQUE (CVSS 9.3).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 27.3%, plus élevée que 98.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777.

References

kb.cert.org/vuls/id/154421 · US Government Resource
marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05
securityfocus.com/bid/38571 · Exploit
symantec.com/connect/blogs/trojan-found-usb-battery-charger-software · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free