CVE-2010-0600: Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.rele...

Security readout for executives and security teams

Certain Cisco and Richards-Zeta building mediator devices exposed account details because a configuration file was not properly protected from network access. A remote attacker with XML RPC or XML RPC over HTTPS access could read passwords and other account information. This is most urgent where these devices remain reachable on operational or management networks. Exposure is likely limited to legacy Cisco Network Building Mediator and Richards-Zeta Mediator deployments. Risk increases if XML RPC or HTTPS management interfaces are reachable from untrusted networks or shared operational networks. Treat as high priority for any still-deployed building management mediator systems. Credential exposure in operational technology environments can create broader access risk, especially on flat networks or internet-reachable management interfaces. Mitigation focus: Inventory affected mediator models and Cisco Mediator Framework versions.; Upgrade beyond the affected builds identified in Cisco guidance.; Restrict XML RPC and HTTPS management access to trusted administrative networks..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.