Vulnerability in Cisco Mediator Framework Affects Network Building Mediators

CVE-2010-0599

Summary

The Cisco Mediator Framework, including specific versions of the Network Building Mediator NBM-2400, NBM-4800 and the Richards-Zeta Mediator 2500, is susceptible to a vulnerability where XML RPC sessions are not properly encrypted. This weakness allows remote attackers to capture sensitive information, specifically administrator credentials, through network sniffing techniques. The lack of encryption in these sessions enables unauthorized users to exploit this oversight, potentially compromising the security of the network infrastructure.

References