CVE-2010-2306: The default installation of Sourcefire 3D Sensor 1000, 2000, and 9900; and Defense Center 1000; uses the sa...

Security readout for executives and security teams

Some Sourcefire security appliances shipped with the same private SSL keys across installations. If an attacker can position themselves between a user and the device, those shared keys could let them decrypt SSL-protected traffic. The provided sources do not establish active exploitation or a current patch status. Exposure is most likely in legacy Sourcefire 3D Sensor or Defense Center deployments left in default SSL-key configuration, especially where SSL management traffic crosses untrusted or shared networks. Prioritize if these legacy Sourcefire appliances still exist in sensitive environments. The business risk is confidentiality loss of SSL-protected management or device traffic, but urgency depends on asset presence and network exposure. Mitigation focus: Inventory named Sourcefire 3D Sensor and Defense Center models.; Review Sourcefire notice 1437 for official remediation guidance.; Apply any vendor-provided update or key replacement procedure..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.