CVE-2010-0597: Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev...

Security readout for executives and security teams

This flaw affects legacy Cisco and Richards-Zeta building mediator devices. An authenticated remote user could read or change device configuration, gain privileges, or force a reload. The sources do not provide CVSS data, but the business impact can be serious where these devices support building automation or operational systems. Exposure is most likely in organizations still operating Cisco Network Building Mediator NBM-2400, NBM-4800, or Richards-Zeta Mediator 2500 devices with affected framework versions. Risk increases if management interfaces are reachable beyond tightly controlled administrator networks. Treat this as high priority for legacy building automation environments. It is not shown as actively exploited in the supplied sources, but authenticated misuse could disrupt facilities operations or change device behavior. Mitigation focus: Identify all Cisco or Richards-Zeta Mediator devices in operational environments.; Upgrade affected framework versions to Cisco-fixed releases or later.; Restrict XML RPC and HTTPS management access to trusted administration networks..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.