Unscored severity · published Dec 13, 2015
CVE-2015-6389
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishing an SSH session and leveraging knowledge of this account's password, aka Bug ID CSCus62707.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PC
Prime Collaboration Assurance · Cisco
10.5.1; 10.6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6389
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6389
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-pca
www.securityfocus.com
http://www.securityfocus.com/bid/78738
www.securitytracker.com
http://www.securitytracker.com/id/1034361
More from Prime Collaboration Assurance
9.8
CVE-2018-0321
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system
9.1
CVE-2019-1662
Cisco Prime Collaboration Assurance Software Unauthenticated Access Vulnerability
8.8
CVE-2017-6659
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct a cross-site request…
8.4
CVE-2018-0141
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system
7.5
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,…