CVE-2010-0596: Unspecified vulnerability in Cisco Mediator Framework 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1...

Security readout for executives and security teams

This flaw affects older Cisco/Richards-Zeta building mediator devices. An authenticated remote user could use HTTP or HTTPS to read or change device configuration and gain privileges. For facilities using these devices, the business concern is unauthorized control-plane changes to building-management infrastructure. Exposure is limited to organizations still operating the named mediator appliances with the vulnerable framework versions, especially where HTTP or HTTPS management is reachable by users beyond a tightly controlled administration network. Prioritize remediation if these devices support building operations or are reachable from broad internal networks. The issue is old, but legacy operational technology often persists, and the impact includes configuration modification and privilege gain. Mitigation focus: Inventory Cisco NBM-2400, NBM-4800, and Richards-Zeta Mediator 2500 devices.; Upgrade Cisco Mediator Framework to 2.2.1.dev.1, 3.0.9.release.1, or later vendor-supported guidance.; Restrict HTTP and HTTPS management access to trusted administrative networks..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.