Description
Cisco Unified Videoconferencing (UVC) System 5110 and 5115, when the Linux operating system is used, has a default password for the (1) root, (2) cs, and (3) develop accounts, which makes it easier for remote attackers to obtain access via the (a) FTP or (b) SSH daemon, aka Bug ID CSCti54008.
References (5)
Core 5
Core References
Various Sources x_refsource_misc
http://www.trustmatta.com/advisories/MATTA-2010-001.txt
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_response09186a0080b56d0d.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1024753
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/44924
Mailing List mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2010/Nov/167
Scores
EPSS
0.0337
EPSS Percentile
87.5%
Details
CWE
CWE-255
Status
published
Products (4)
cisco/unified_videoconferencing_system_5110
cisco/unified_videoconferencing_system_5110_firmware
7.0.1.13.3
cisco/unified_videoconferencing_system_5115
cisco/unified_videoconferencing_system_5115_firmware
7.0.1.13.3
Published
Nov 22, 2010
Tracked Since
Feb 18, 2026