Cisco issued an announcement to fix a vulnerability in the Cisco Common Services Platform Collector (CSPC) (CVE-2019-1723). The vulnerability stems from a default account with a fixed password in the system. The attacker can directly log in to the affected device through the account and password. The account does not have administrator rights.
- Cisco CSPC releases 2.7.x <= 22.214.171.124
- Cisco CSPC releases 2.8.x < 126.96.36.199
- Cisco CSPC releases 188.8.131.52
- Cisco CSPC releases 184.108.40.206
Cisco has released the above vulnerability to fix the above vulnerability, the affected users as soon as possible to upgrade.