CVE-2015-4196

CWE-255CWE-2644 documents4 sources
Severity
5.0MEDIUM
EPSS
0.2%
top 52.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJul 4
Latest updateMay 17

Description

Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-x733-qw5x-37j6: Platform Software before 42022-05-17
CVEList
CVE-2015-4196: Platform Software before 42015-07-04

📋Vendor Advisories

1
Cisco
Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials2015-07-01
CVE-2015-4196 (MEDIUM CVSS 5) | Platform Software before 4.4.5 in C | cvebase.io