CVE-2014-0709

Severity CVSS v4.0:
Pending analysis
Type:
CWE-255 Credentials Management
Publication date:
22/02/2014
Last modified:
11/04/2025

Description

Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to the CLI interface, aka Bug ID CSCui73930.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:cisco:ucs_director:*:*:*:*:*:*:*:* 4.0.0.2 (including)
cpe:2.3:a:cisco:ucs_director:4.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:4.0.0.1:*:*:*:*:*:*:*