Unspecified vulnerability in Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng 2.2 before 2.2.1.dev.1 and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 allows remote authenticated users to read or modify the device configuration and gain privileges or cause a denial of service (device reload) via a (1) XML RPC or (2) XML RPC over HTTPS request aka Bug ID CSCtb83618.