Cisco issued an announcement to fix a vulnerability in the Cisco Common Services Platform Collector (CSPC) (CVE-2019-1723). The vulnerability stems from a default account with a fixed password in the system. The attacker can directly log in to the affected device through the account and password. The account does not have administrator rights.
- Cisco CSPC releases 2.7.x <= 220.127.116.11
- Cisco CSPC releases 2.8.x < 18.104.22.168
- Cisco CSPC releases 22.214.171.124
- Cisco CSPC releases 126.96.36.199
Cisco has released the above vulnerability to fix the above vulnerability, the affected users as soon as possible to upgrade.