CVE-2014-0709: Critical severity Cisco UCS Director vulnerability
Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0709?
CVE-2014-0709 has a high severity rating due to its exploitation potential allowing unauthorized administrative access.
How do I fix CVE-2014-0709?
To fix CVE-2014-0709, upgrade Cisco UCS Director to version 4.0.0.3 or later to remove the hardcoded password.
What impact does CVE-2014-0709 have on systems?
CVE-2014-0709 can lead to unauthorized remote administrative access to Cisco UCS Director systems.
Is there a workaround for CVE-2014-0709?
There are no recommended workarounds for CVE-2014-0709; the only solution is to upgrade the software.
Which versions of Cisco UCS Director are affected by CVE-2014-0709?
Versions of Cisco UCS Director prior to 4.0.0.3, including 4.0.0.0, 4.0.0.1, and 4.0.0.2, are affected by CVE-2014-0709.