Cisco Video Surveillance Manager Appliance Default Password Vulnerability

Description

A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user credentials. The vulnerability is due to the presence of undocumented, default, static user credentials for the root account of the affected software on certain systems. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.

Scores

EPSS (exploitation in 30 days)

6.8% · top 6.0% of all CVEs (4 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: yes · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.

Weakness

• CWE-798 (opens in a new tab)All about CWE-798 and its CVEs

Affected products

• Cisco · Cisco Video Surveillance Manager

  • affected n/a

References (3)

• 105381 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 20180921 Cisco Video Surveillance Manager Appliance Default Password Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
• 1041733 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-15427](https://trackcve.app/badge/CVE-2018-15427.svg)](https://trackcve.app/cve/CVE-2018-15427)

Record last updated 26 Nov 2024, 14:27 UTC.