CVE-2010-0598: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.rele...

Security readout for executives and security teams

This vulnerability exposes administrator credentials because some Cisco Mediator Framework versions sent operator web sessions without encryption. An attacker with the ability to monitor the relevant network traffic could capture credentials. The issue affects building automation mediator appliances, so compromise could matter operationally even though the bundle provides no CVSS score. Exposure is likely limited to organizations still running Cisco Network Building Mediator NBM-2400, NBM-4800, or Richards-Zeta Mediator 2500 with the vulnerable Framework builds. Risk is highest where operator workstations manage these devices over shared, untrusted, or poorly segmented networks. Prioritize remediation for any in-use building automation mediator appliances, especially in facilities where operational continuity matters. The flaw is old, but plaintext administrator credentials are a serious control weakness if legacy devices remain deployed. Mitigation focus: Identify all Cisco and Richards-Zeta Mediator appliances in the environment.; Upgrade vulnerable Framework versions to the fixed builds or later.; Review the Cisco advisory for exact supported remediation guidance..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.