Cisco Video Surveillance Manager Default Administrator Credentials

critical Nessus Plugin ID 69855

Language:

Synopsis

A web application is protected using default administrative credentials.

Description

The remote Cisco Video Surveillance Manager install uses a default set of credentials ('root' / 'secur4u') to control access to its management interface.

With this information, an attacker can gain administrative access to the application.

Solution

Log into the application and change the default login credentials.

Plugin Details

Severity: Critical

ID: 69855

File Name: cisco_vsm_default_creds.nasl

Version: 1.7

Type: remote

Family: CISCO

Published: 9/12/2013

Updated: 3/27/2019

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Default credentials

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:X/RC:X

Vulnerability Information

CPE: cpe:/a:cisco:video_surveillance_manager

Required KB Items: installed_sw/Cisco Video Surveillance Management Console

Excluded KB Items: global_settings/supplied_logins_only

Detections

Analytics