CVE-2014-2198 Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the supp...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco unified cdm platform software | <= 4.4 | No fix listed |
| cisco unified communications domain manager | All versions | No fix listed |
References
- 59544 third-party-advisory
- 20140702 Multiple Vulnerabilities in Cisco Unified Communications Domain Manager vendor-advisory
- 20140702 Identifying and Mitigating Exploitation of the Multiple Vulnerabilities in Cisco Unified Communications Domain Manager vendor-advisory
- 68334 vdb-entry
- 1030515 vdb-entry