Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to overwrite the pwrecovery account stored on the Cisco TelePresence unit, and permit changing the password from the default to one created by the Cisco Unfied CM administrator.

Reason :-

http://threatpost.com/remotely-exploitable-bug-affects-wide-range-of-cisco-telepresence-systems

“The vulnerability is due to a default user account being created at installation time. An attacker could exploit this vulnerability by remotely accessing the web server and using the default account credentials. An exploit could allow the attacker to log in with the default credentials, which gives them full administrative rights to the system,” Cisco said in its advisory.

Follow steps:-

A. Proceed to Cisco Unified CM Administration

Device > Phone, search and select the configured Cisco TelePresence unit(Codec).

B. Under the Secure Shell Information (ssh), change the ssh helpdesk user name from the default helpdesk to pwrecovery, and then choose an alternate password.


This will overwrite the pwrecovery account stored on the Cisco TelePresence unit, and permit changing the password from the default to one created by the Cisco Unfied CM administrator.


3. Reboot the Cisco TelePresence codec to download the updated Cisco Unified CM configuration.

1 REPLY
VIP Green

How to overwrite the pwrecovery account stored on the Cisco Tele

This post would be best if you converted it to a document rather than as a discussion/question.  Are you able to use the "Convert discussion to document" link in the Actions box and/or mark the discussion as Answered so it doesn't keep showing in the unanswered questions section.

Wayne

--

Please remember to rate responses and to mark your quesiton as answered if appropriate.

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.
357
Views
0
Helpful
1
Replies
CreatePlease login to create content