CVE-2018-15427 Cisco Video Surveillance Manager Appliance Default Password Vulnerability

What is CVE-2018-15427?

CVE-2018-15427 is a critical vulnerability in Cisco Video Surveillance Manager, published on 5 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in Cisco Video Surveillance Manager (VSM) Software running on certain Cisco Connected Safety and Security Unified Computing System (UCS) platforms could allow an unauthenticated, remote attacker to log in to an affected system by using the root account, which has default, static user credentials. The vulnerability is due to the presence of undocumented, default, static user credentials for the root account of the affected software on certain systems. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user.

Weakness: CWE-798

Which versions are affected by CVE-2018-15427?

It affects 1 product.

Products include Cisco Video Surveillance Manager.

How do I fix CVE-2018-15427?

No fix has been published for CVE-2018-15427 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-15427 being exploited?

There is no known exploitation of CVE-2018-15427 in the wild and no public exploit code.

Other vulnerabilities in Cisco Video Surveillance Manager

• CVE-2013-3430 Information disclosure in n/a Critical 9.0
• CVE-2013-3429 Path traversal in n/a High 7.8
• CVE-2013-3431 Missing authorization in n/a High 7.8
• CVE-2019-1717 Cisco Video Surveillance Manager Web-Based Management Interface Information Disclosure Vulnerability High 7.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-47wq-mxqc-399h.