CVE-2010-0595

Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 has a default password for the administrative user account and unspecified other accounts, which makes it easier for remote attackers to obtain privileged access, aka Bug ID CSCtb83495.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@cisco.com

Published

2010-05-27

Last modified

2024-08-07

Weaknesses

CWE-255

Affected products

• Mediator Framework (Cisco)

References

• http://secunia.com/advisories/39904
• http://securitytracker.com/id?1024027
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml
• http://www.kb.cert.org/vuls/id/757804
• http://www.securityfocus.com/bid/40380
• http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58893