Cisco Common Services Platform Collector Static Credential Vulnerability Alert
Cisco issued an announcement to fix a vulnerability in the Cisco Common Services Platform Collector (CSPC) (CVE-2019-1723). The vulnerability stems from a default account with a fixed password in the system. The attacker can directly log in to the affected device through the account and password. The account does not have administrator rights.
- Cisco CSPC releases 2.7.x <= 188.8.131.52
- Cisco CSPC releases 2.8.x < 184.108.40.206
- Cisco CSPC releases 220.127.116.11
- Cisco CSPC releases 18.104.22.168
Cisco has released the above vulnerability to fix the above vulnerability, the affected users as soon as possible to upgrade.