Cisco Network Building Mediator Default Credentials Authentication Bypass Vulnerability

Bugtraq ID:	40380
Class:	Design Error
CVE:	CVE-2010-0595
Remote:	Yes
Local:	No
Published:	May 26 2010 12:00AM
Updated:	May 26 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Network Building Mediator 3.0.8 Cisco Network Building Mediator 1.5.1 Cisco Network Building Mediator 3.0 Cisco Network Building Mediator 2.2 Cisco Network Building Mediator 1.5
Not Vulnerable:	Cisco Network Building Mediator 3.1.1

Cisco Network Building Mediator Default Credentials Authentication Bypass Vulnerability

Cisco Network Building Mediator (NBM) is prone to a remote authentication-bypass vulnerability.

An attacker can exploit this issue to gain unauthorized administrative access to the affected device. Successful exploits will result in the complete compromise of the affected device.

This issue is being tracked by Cisco bug ID CSCtb83495.

Cisco Network Building Mediator Default Credentials Authentication Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Cisco Network Building Mediator Default Credentials Authentication Bypass Vulnerability

Solution:
The vendor has released an advisory along with fixes. Please see the referenced advisory for details.

Cisco Network Building Mediator Default Credentials Authentication Bypass Vulnerability

References:

• Cisco Applied Mitigation Bulletin: Identifying and Mitigating Exploitation of th (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Network Building Medi (Cisco)