Vulnerability in Cisco Ucs Director
CVE-2014-0709
Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.
EPSS: 0.018 (76.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ucs_director — versions 4.0.0.0, 4.0.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)