Vulnerability in Cisco Unified_communications_domain_manager

CVE-2015-4196

Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager (CDM) 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and ent…

EPSS: 0.002 (47.6th percentile) — read the EPSS interpretation.

Affected products

Cisco Unified_communications_domain_manager — versions 4.4.1, 4.4.2, 4.4.3
N/a — versions n/a

Weakness classification (CWE)

CWE-255

References

20150701 Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
1032774 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)