CVE-2014-0709 Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the...
HighCVSS 9.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ucs director | <= 4.0.0.2 | No fix listed |
| cisco ucs director | = 4.0.0.0 | No fix listed |
| cisco ucs director | = 4.0.0.1 | No fix listed |
References
- 20140219 Cisco UCS Director Default Credentials Vulnerability vendor-advisory