CVE-2014-2198

published 2014-07-07

CVE-2014-2198: Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	unified_cdm_platform_software	<= 4.4	—
cisco	unified_communications_domain_manager	—	—

CWE-255 CWE-264 CWE-321