CVE-2010-0425: Critical – modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server

◆ SAGE Intelligence — CITED Relevance Research Team

A vulnerability in the mod_isapi module of the Apache HTTP Server allows remote attackers to execute arbitrary code due to improper handling of request processing completion before unloading an ISAPI .dll module.

BSID: BS-2010-GLOBAL-171958-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2010-0425?

A vulnerability in the mod_isapi module of the Apache HTTP Server allows remote attackers to execute arbitrary code due to improper handling of request processing completion before unloading an ISAPI .dll module.

What is the CVSS score for CVE-2010-0425?

CVE-2010-0425 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 94.2%.

Is CVE-2010-0425 actively exploited?

Public exploit available for CVE-2010-0425. Exploitation risk elevated.

How do I remediate CVE-2010-0425?

Priority: IMMEDIATE. Advisory: http://httpd.apache.org/security/vulnerabilities_20.html PSIRT: [email protected]

What systems are affected by CVE-2010-0425?

CVE-2010-0425 affects: Apache, Broadcom, Ibm, Ibm, Microsoft, Oracle.

Vulnerability Details

CVE ID	`CVE-2010-0425`
BSID	`BS-2010-GLOBAL-171958-C` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:C/I:C/A:C`
Published	2010-03-05
Last Modified	2025-07-24
ICS Relevance	0%
Source	NVD

Official Description

modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and "orphaned callback pointers."

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The attack involves sending a crafted request or a reset packet to the server, which can lead to the execution of arbitrary code if the ISAPI .dll module is not properly managed during unloading.

Exploitation Likelihood: CRITICAL

Affected Products

Vendor	Product	Fixed Version
Apache	Http Server	—
Broadcom	Vmware Ace Management Server	—
Ibm	Websphere Application Server	—
Ibm	Http Server	—
Microsoft	Windows	—
Oracle	Http Server	—

Remediation

View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]

Threat Intelligence

● Threat Intelligence Validated: July 2026 | Threat Age: 5986 Days

CISA KEV	Not in KEV catalog
Public Exploit	⚠ Available — Reference
PoC Code	Not confirmed

SAGE Enrichment Record — provenance & audit hash

Model	`/workspace/models/qwen2.5-coder-32b-instruct-bf16`
Confidence	HIGH
Enriched At	2026-05-24

Related CVEs affecting Apache

CVE-1999-0067 10.0 phf CGI program allows remote command execution through shell metacharacters. CVE-1999-0926 10.0 Apache allows remote attackers to conduct a denial of service via a large num... CVE-1999-1293 10.0 mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a deni... CVE-2003-0789 10.0 mod_cgid in Apache before 2.0.48, when using a threaded MPM, does not properl... CVE-2012-3506 10.0 Unspecified vulnerability in the Apache Open For Business Project (aka OFBiz)...

View all Apache CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Check Your Assets Free →