The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business…
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:cisco:pvc2300:*:*:*:*:*:*:*:* | up to 1.1.1.4 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:wvc200:*:*:*:*:*:*:*:* | up to 1.1.0.15 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:wvc200:1.1.0.12:*:*:*:*:*:*:* | 1.1.0.12 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:wvc210:*:*:*:*:*:*:*:* | up to 1.1.0.15 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:wvc210:1.1.0.12:*:*:*:*:*:*:* | 1.1.0.12 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:wvc2300:*:*:*:*:*:*:*:* | up to 1.1.1.4 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rvs4000:*:*:*:*:*:*:*:* | up to 1.3.1.0 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:rvs4000:1.3.0.5:*:*:*:*:*:*:* | 1.3.0.5 | Vulnerable | Cisco |
- cpe:2.3:h:cisco:pvc2300:*:*:*:*:*:*:*:* Versions up to 1.1.1.4 Vulnerable ·Cisco
- cpe:2.3:h:cisco:wvc200:*:*:*:*:*:*:*:* Versions up to 1.1.0.15 Vulnerable ·Cisco
- cpe:2.3:h:cisco:wvc200:1.1.0.12:*:*:*:*:*:*:* Versions 1.1.0.12 Vulnerable ·Cisco
- cpe:2.3:h:cisco:wvc210:*:*:*:*:*:*:*:* Versions up to 1.1.0.15 Vulnerable ·Cisco
- cpe:2.3:h:cisco:wvc210:1.1.0.12:*:*:*:*:*:*:* Versions 1.1.0.12 Vulnerable ·Cisco
- cpe:2.3:h:cisco:wvc2300:*:*:*:*:*:*:*:* Versions up to 1.1.1.4 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rvs4000:*:*:*:*:*:*:*:* Versions up to 1.3.1.0 Vulnerable ·Cisco
- cpe:2.3:h:cisco:rvs4000:1.3.0.5:*:*:*:*:*:*:* Versions 1.3.0.5 Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-0593
- 2026-10-03 Alias added: GHSA-5m7m-mrc8-69mh
References
Sources
- CVE-2010-0593 · CVE Program
- CVE-2010-0593 · NVD
- FIRST EPSS
- GHSA-5m7m-mrc8-69mh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences