« Volver al listado

CVE-2010-0599

Estado: ModificadaAlta (9.3)—

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Mediator Framework

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0599",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-05-27T19:30:01.563",
  "references": [
    {
      "url": "http://secunia.com/advisories/39904",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1024027",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/757804",
      "tags": [
        "US Government Resource"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/39904",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1024027",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/757804",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505."
    },
    {
      "lang": "es",
      "value": "Cisco Mediator Framework v1.5.1 anterior a v1.5.1.build.14-eng, v2.2 anterior a v2.2.1.dev.1, y v3.0 anterior a v3.0.9.release.1 en Cisco Network Building Mediator NBM-2400 y NBM-4800 y en Richards-Zeta Mediator v2500 no cifra sesiones  XML RPC para los operadores de las estaciones de trabajo, lo que permite a atacantes remotos descubrir credenciales de administrador espiando el tráfico de red, también conocido como Bug ID CSCtb83505.\r\n\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:16:28.783",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2ED25A9-5C95-42B2-A130-D2408424A12C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43882C04-733C-4E82-80BA-E448727964CF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:3.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA5908EA-AE44-4D6A-A075-25F29018EC67"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:network_building_mediator_nbm-2400:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B424A35F-EF83-4E78-BFD4-4FF31BF5959C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:network_building_mediator_nbm-4800:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "653E88C2-72DC-4842-A7C1-0C671A09A4B0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:richards-zeta_mediator_2500:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E41E17D4-5C33-4F8A-A1E2-8D7FE47D8492"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}