CVE-2014-2198
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2...
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
Exploit likelihood
What each source reports
NVD Score used
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
- Record
CVE-2014-2198- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-255
- Updated
- 2026-11-02
CVE List No score
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
- Record
CVE-2014-2198- Updated
- 2026-11-02
EUVDEUVD-2014-2238 No score
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
- Record
EUVD-2014-2238- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-74rx-7c78-8jm5 No score
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2...
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.
- Record
GHSA-74rx-7c78-8jm5- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2198 is a high vulnerability (CVSS 10.0) in Cisco Unified Cdm Platform Software, published July 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.60%, the 89th percentile. No source names a fixed version.
References
secunia.com/advisories/59544
securityfocus.com/bid/68334
securitytracker.com/id/1030515
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
nvd.nist.gov/vuln/detail/CVE-2014-2198
github.com/advisories/GHSA-74rx-7c78-8jm5