Cisco Common Services Platform Collector 权限许可和访问控制漏洞

漏洞信息详情

Cisco Common Services Platform Collector（CSPC）是美国思科（Cisco）公司的一款通用服务平台数据收集器。该产品通过轮询思科设备的基本库存和配置数据分析网络性能，并识别风险和漏洞。

Cisco CSPC 2.7.2版本至2.7.4.5版本和2.8.1.2之前的2.8.x版本中存在权限许可和访问控制漏洞，该漏洞源于该软件所带有的用户账户使用了默认的静态密码。远程攻击者可借助该账户远程连接受影响的系统利用该漏洞登录到CSPC中。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-cspcscv

来源:www.cisco.com

链接:http://www.cisco.com/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-1723

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/77162

来源:www.securityfocus.com

链接:https://www.securityfocus.com/bid/107405

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/152094/Cisco-Common-Service-Platform-Collector-Hardcoded-Credentials.html

来源:tools.cisco.com

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-cspcscv

暂无