CVE-2014-2198

KRITISCH 10.0CVE-2014-2198 · Published 07/07/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-2198 ist eine Schwachstelle (KRITISCH (CVSS 10.0)) in unified cdm platform software (cisco).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 3.6%, höher als bei 89.5% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
unified cdm platform software cisco	`≤ 4.4`	No fix yet

Description

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.

References

secunia.com/advisories/59544
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm · Vendor Advisory
tools.cisco.com/security/center/viewAMBAlert.x
securityfocus.com/bid/68334
securitytracker.com/id/1030515

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free