« Volver al listado

CVE-2010-0600

Estado: ModificadaAlta (10)—

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Mediator Framework

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0600",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-05-27T19:30:01.623",
  "references": [
    {
      "url": "http://secunia.com/advisories/39904",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1024027",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/757804",
      "tags": [
        "US Government Resource"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/40384",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/39904",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1024027",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/757804",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/40384",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512."
    },
    {
      "lang": "es",
      "value": "Cisco Mediator Framework v1.5.1 anterior a v1.5.1.build.14-eng, v2.2 anterior a v2.2.1.dev.1, y v3.0 anterior a v3.0.9.release.1 en Cisco Network Building Mediator NBM-2400 y NBM-4800 y en Richards-Zeta Mediator v2500 no restringe adecuadamente los accesos de red en un fichero de configuración sin especificar, lo que permite a atacantes remotos leer contraseñas y otros detalles de la cuenta sin especificar a través de una sesión (1) XML RPC o (2) XML RPC sobre HTTPS, también conocido como Bug ID CSCtb83512."
    }
  ],
  "lastModified": "2026-06-16T23:16:28.893",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:1.5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2ED25A9-5C95-42B2-A130-D2408424A12C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "43882C04-733C-4E82-80BA-E448727964CF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mediator_framework:3.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA5908EA-AE44-4D6A-A075-25F29018EC67"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:network_building_mediator_nbm-2400:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B424A35F-EF83-4E78-BFD4-4FF31BF5959C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:network_building_mediator_nbm-4800:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "653E88C2-72DC-4842-A7C1-0C671A09A4B0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:richards-zeta_mediator_2500:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E41E17D4-5C33-4F8A-A1E2-8D7FE47D8492"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}