CVE-2010-0599: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.rele...

Security readout for executives and security teams

This is a credential exposure flaw in Cisco Network Building Mediator systems. Operator workstation sessions to the mediator used unencrypted XML RPC, so someone able to monitor that network traffic could learn Administrator credentials. The sources do not show active exploitation, but the impact is serious where these building-management devices remain in use. Exposure is most likely in legacy building-management or industrial-control environments still running Cisco Network Building Mediator or Richards-Zeta Mediator devices on affected framework versions. Prioritize if these legacy mediator systems manage physical facilities or building operations. The main business risk is Administrator credential disclosure, which can enable follow-on access where management networks are weakly segmented. Mitigation focus: Identify any Cisco Network Building Mediator or Richards-Zeta Mediator deployments.; Upgrade affected framework versions to the fixed builds named by Cisco/CVE sources.; Follow Cisco advisory guidance for supported remediation and compensating controls..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.