Vulnerability Description
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Common Services Platform Collector | >= 2.7.2, < 2.7.4.6 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/107405Third Party AdvisoryVDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2PatchVendor Advisory
- https://www.info-sec.ca/advisories/Cisco-Collector.htmlThird Party Advisory
- http://www.securityfocus.com/bid/107405Third Party AdvisoryVDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2PatchVendor Advisory
- https://www.info-sec.ca/advisories/Cisco-Collector.htmlThird Party Advisory
FAQ
What is CVE-2019-1723?
CVE-2019-1723 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static passw...
How severe is CVE-2019-1723?
CVE-2019-1723 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-1723?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Common Services Platform Collector.