GCVE - cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:mediator_framework:2.2:*:*:*:*:*:*:*

part: a version: 2.2 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Mediator Framework (`ae9c38ac-0643-5d57-8cd0-103b3ea5929e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0600`	vulnerable	2026-06-08 04:52:03.547703	Details available Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not properly restrict network access to an unspecified configuration file, which allows remote attackers to read passwords and unspecified other account details via a (1) XML RPC or (2) XML RPC over HTTPS session, aka Bug ID CSCtb83512. Published: 2010-05-27T19:00:00.000Z Updated: 2024-08-07T00:52:19.356Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024027 http://www.securityfocus.com/bid/40384 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf http://www.kb.cert.org/vuls/id/757804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0599`	vulnerable	2026-06-08 04:52:03.547252	Details available Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83505. Published: 2010-05-27T19:00:00.000Z Updated: 2024-08-07T00:52:19.836Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024027 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf http://www.kb.cert.org/vuls/id/757804 http://secunia.com/advisories/39904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0598`	vulnerable	2026-06-08 04:52:03.546820	Details available Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt HTTP sessions from operator workstations, which allows remote attackers to discover Administrator credentials by sniffing the network, aka Bug ID CSCtb83631. Published: 2010-05-27T19:00:00.000Z Updated: 2024-08-07T00:52:19.457Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024027 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf http://www.kb.cert.org/vuls/id/757804 http://secunia.com/advisories/39904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0597`	vulnerable	2026-06-08 04:52:03.546290	Details available Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges or cause a denial of service (device reload), via a (1) XML RPC or (2) XML RPC over HTTPS request, aka Bug ID CSCtb83618. Published: 2010-05-27T19:00:00.000Z Updated: 2024-08-07T00:52:19.813Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024027 http://www.securityfocus.com/bid/40386 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf http://www.kb.cert.org/vuls/id/757804	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0596`	vulnerable	2026-06-08 04:52:03.545807	Details available Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration, and gain privileges, via a (1) HTTP or (2) HTTPS request, aka Bug ID CSCtb83607. Published: 2010-05-27T19:00:00.000Z Updated: 2024-08-07T00:52:19.455Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1024027 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b2c518.shtml http://www.us-cert.gov/control_systems/pdf/ICSA-10-147-01_Cisco_Network_Building_Mediator.pdf http://www.kb.cert.org/vuls/id/757804 http://secunia.com/advisories/39904	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0595`	vulnerable	2026-06-08 04:52:03.542215	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.