← Vulnerability feed

Vulnerability record · CVE-2010-0593 · published 22 April 2010

CVE-2010-0593: Cisco pvc2300 permissions and access controls vulnerability

Cisco · Pvc2300

The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.

9.0 CVSS 2.0 High EPSS 3.0% · top 13.0% CWE-264 · Permissions and access controls
9.0CVSS 2.0 base score
3.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
14References
16 Jun 2026Last modified by NVD

Description

The Cisco RVS4000 4-port Gigabit Security Router before 1.3.2.0, PVC2300 Business Internet Video Camera before 1.1.2.6, WVC200 Wireless-G PTZ Internet Video Camera before 1.1.1.15, WVC210 Wireless-G PTZ Internet Video Camera before 1.1.1.15, and WVC2300 Wireless-G Business Internet Video Camera before 1.1.2.6 do not properly restrict read access to passwords, which allows context-dependent attackers to obtain sensitive information, related to (1) access by remote authenticated users to a PVC2300 or WVC2300 via a crafted URL, (2) leveraging setup privileges on a WVC200 or WVC210, and (3) leveraging administrative privileges on an RVS4000, aka Bug ID CSCte64726.

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/63978
http://secunia.com/advisories/39510
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b27511.shtml PatchVendor Advisory
http://www.securityfocus.com/bid/39612
http://www.securitytracker.com/id?1023906
http://www.vupen.com/english/advisories/2010/0965
https://exchange.xforce.ibmcloud.com/vulnerabilities/58034
http://osvdb.org/63978
http://secunia.com/advisories/39510
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b27511.shtml PatchVendor Advisory
http://www.securityfocus.com/bid/39612
http://www.securitytracker.com/id?1023906
http://www.vupen.com/english/advisories/2010/0965
https://exchange.xforce.ibmcloud.com/vulnerabilities/58034

Track CVE-2010-0593 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2014-0659Cisco WAP4410N, WRVS4400N and RVS4000 command injection via TCP port 32764Cisco WAP4410N access points, WRVS4400N and RVS4000 routers expose a test interface on TCP port 32764 that fails to properly handle requests, allowin…EPSS 74%analysed9.3CVE-2011-1645Cisco rvs4000 vulnerabilityThe web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N …EPSS 3.4%9.0CVE-2011-1646Cisco rvs4000 code injection vulnerabilityThe web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N …EPSS 1.9%5.0CVE-2011-1647Cisco rvs4000 information exposure vulnerabilityThe web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N …EPSS 1.2%5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2010-0593), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.