CVE-2010-0595: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.rele...

Security readout for executives and security teams

This CVE describes default administrative credentials in Cisco Mediator Framework on specific building mediator appliances. A remote attacker who can reach the device could gain privileged access more easily. The issue matters most where these systems connect to building operations or control networks. Exposure is likely limited to organizations that deployed the listed mediator appliances and left the affected Framework versions reachable over a network. Internet exposure would raise urgency, but the provided sources do not state how commonly these devices were exposed. Treat as high priority for facilities, OT, and building management environments. Default privileged credentials on control-adjacent devices create a direct access risk, even though public exploitation is not confirmed in the supplied sources. Mitigation focus: Identify affected mediator appliances and confirm installed Framework versions.; Upgrade to the fixed versions identified in Cisco guidance or later.; Remove or change default administrative and service account credentials..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.