CVE-2010-0595

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-27 · updated 2026-06-16
Weakness: CWE-255

Description

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other accounts, which makes it easier for remote attackers to obtain privileged access, aka Bug ID CSCtb83495.

Affected products

Cisco Mediator Framework: 1.5.1, 2.2, 3.0.8

References

http://secunia.com/advisories/39904
http://securitytracker.com/id?1024027
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml
http://www.kb.cert.org/vuls/id/757804
http://www.securityfocus.com/bid/40380
http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/58893
http://secunia.com/advisories/39904
http://securitytracker.com/id?1024027
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml
http://www.kb.cert.org/vuls/id/757804
http://www.securityfocus.com/bid/40380

Get alerted when CVE-2010-0595 or the next vulnerability affects your stack