CVE-2014-2198
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0220 (2.2%)
Percentil: 84.5%
EPSS: 2026-05-06
Afecta
cisco:unified_cdm_platform_softwarecisco:unified_communications_domain_managerDescripción técnica
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
Publicada: 7/7/2014, 11:01:29
Última modificación: 6/5/2026, 22:30:45
Referencias
- http://secunia.com/advisories/59544
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689
- http://www.securityfocus.com/bid/68334
- http://www.securitytracker.com/id/1030515
- http://secunia.com/advisories/59544
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
- http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34689