Cisco Common Services Platform Collector Static Credential Vulnerability Alert

Cisco issued an announcement to fix a vulnerability in the Cisco Common Services Platform Collector (CSPC) (CVE-2019-1723). The vulnerability stems from a default account with a fixed password in the system. The attacker can directly log in to the affected device through the account and password. The account does not have administrator rights.

Affected version

  • Cisco CSPC releases 2.7.x <=
  • Cisco CSPC releases 2.8.x <

Unaffected version

  • Cisco CSPC releases
  • Cisco CSPC releases


Cisco has released the above vulnerability to fix the above vulnerability, the affected users as soon as possible to upgrade.