N/A

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite (CEMS) could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default access credentials. An attacker could exploit this vulnerability by logging in to the machine where CEMS is installed and establishing a local connection to the database. The fix for this vulnerability randomizes the database access password in new installations; however, the fix will not change the password for existing installations. Users are required to manually change the password, as documented in the Workarounds section of this advisory. There are workarounds that address this vulnerability.

N/A

N/A

Cisco Energy Management Suite 安全漏洞

Cisco Energy Management Suite（CEMS）是美国思科（Cisco）公司的一套能源管理套件。该产品主要用于管理网络设备的能源管理等。 Cisco CEMS的本地数据库的配置中存在安全漏洞，该漏洞源于程序使用默认的访问凭证来安装PostgreSQL数据库。本地攻击者可利用该漏洞访问和修改机密数据。

N/A

N/A