Cisco released security updates to address a critical flaw, tracked as CVE-2019-1723, that consists in the presence of a default account with a static password. The account hasn’t admin privileges, but it could be exploited by an
The Cisco Common Services Platform Collector (CSPC) is a tool that collects information from Cisco devices installed on a network. The SNMP-based tool is used by both Smart Net Total Care (SmartNet) Network Collector and Partner Support Service (PSS) Network Collector.
“A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges.” reads the security advisory published by Cisco.
“The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account.”
The vulnerability was reported to Cisco by the security researcher David Coomber. According to Cisco, the flaw affects CSPC releases 2.7.2 through 220.127.116.11 and all 2.8.x releases, the tech giant addressed it with the release of the versions 18.104.22.168 and 22.214.171.124.
The good news is that Cisco is not aware of any attacks exploiting this vulnerability in the wild.
Earlier this month, Cisco released security updates to address dozens of vulnerabilities impacting the Nexus switches.
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.