CVE-2014-2198: Cisco Unified Cdm Platform Software

High severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from a binary file found in a different installation of the product, aka Bug ID CSCud41130.

Affected products

• Cisco Unified Cdm Platform Software: up to and including 4.4
• Cisco Unified Communications Domain Manager: affected versions not specified

Published 2014-07-07. Last modified 2026-06-17.