« Volver al listado

CVE-2010-0570

Estado: ModificadaAlta (10)—

Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Digital Media Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0570",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-05T19:30:00.627",
  "references": [
    {
      "url": "http://secunia.com/advisories/38800",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1023671",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38503",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0531",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56634",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/38800",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1023671",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38503",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2010/0531",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56634",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378."
    },
    {
      "lang": "es",
      "value": "Cisco Digital Media Manager (DMM) v5.0.x y v5.1.x tiene una contraseña por defecto para la cuenta de administracion del Tomcat, lo que hace mas facil a atacantes remotos ejecutar codigo arbitrario a traves de una aplicacion web manipulada, tambien conocido como Bug ID CSCta03378."
    }
  ],
  "lastModified": "2026-06-16T23:16:25.577",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:digital_media_manager:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98D3AF9D-2540-4E49-923D-98683F0404BD"
            },
            {
              "criteria": "cpe:2.3:a:cisco:digital_media_manager:5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E8B5C0A-3DA6-4F7E-A73E-456F93876DF8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:digital_media_manager:5.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2515E7AA-03E8-4DD1-B19E-105604BD9F92"
            },
            {
              "criteria": "cpe:2.3:a:cisco:digital_media_manager:5.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BADC9AB-BEFA-480F-A4D2-0C8CFE837C4F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:digital_media_manager:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2BB2DB16-8394-4705-AB81-9CE1F005DE58"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml\r\n\r\n\"Default Credentials\r\n\r\nCisco DMM versions 5.0.x and 5.1.x are affected by this vulnerability. Cisco DMM versions 4.x are not vulnerable\"",
  "sourceIdentifier": "psirt@cisco.com"
}