CVE-2019-1723: cisco cisco common services platform collector software
Vulnerability summary
CVE-2019-1723 is a high (CVSS 10.0) vulnerability in cisco cisco common services platform collector software. EPSS estimates a 5.82% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities.
Timeline
- 13-03-2019PublishedVulnerability first disclosed.
- 19-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.
CVSS metrics
4 scores · 2 sources · 3 versions- NVDNIST9.8CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
5.82%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.82% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
- CWE-798Use of Hard-coded CredentialsThe product contains hard-coded credentials, such as a password or cryptographic key.
Affected systems
Cisco2 products
- cisco common services platform collector software≥ unspecified, < 2.7.4.6 | ≥ unspecified, < 2.8.1.2
- common_services_platform_collector≥ 2.7.2, < 2.7.4.6 | ≥ 2.8.0, < 2.8.1.2
1 vendor · 2 products
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-cspcscvVendor AdvisoryX Refsource CISCOPatch