Unscored severity · published Mar 5, 2010
CVE-2010-0570
Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary…
–
CVSS
4.5%
EPSS
No
On KEV
Description
Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for the Tomcat administration account, which makes it easier for remote attackers to execute arbitrary code via a crafted web application, aka Bug ID CSCta03378.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.5% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Digital Media Manager · Cisco
5.0; 5.0.1; 5.0.2; 5.0.3; 5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0570
secunia.com
http://secunia.com/advisories/38800
securitytracker.com
http://securitytracker.com/id?1023671
Patch
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1b923.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/38503
www.vupen.com
http://www.vupen.com/english/advisories/2010/0531
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/56634
More from Digital Media Manager
8.1
CVE-2017-9805
The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type…
–
CVE-2013-3446
Open redirect vulnerability in the login page in Cisco Digital Media Manager (DMM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks…
–
CVE-2012-0329
Cisco Digital Media Manager 5.2.2 and earlier, and 5.2.3, allows remote authenticated users to execute arbitrary code via vectors involving a URL and an administrative resource,…
–
CVE-2010-0572
Cisco Digital Media Manager (DMM) before 5.2 allows remote authenticated users to discover Cisco Digital Media Player credentials via vectors related to reading a (1) error log or…
–
CVE-2010-0571
Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknown vectors, and consequently execute…