Skip to main content

Prime Collaboration CVE-2018-0141

HIGH
Use of Hard-coded Credentials (CWE-798)
2018-03-08 psirt@cisco.com
8.4
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
8.4 HIGH
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 08, 2018 - 07:29 nvd
HIGH 8.4

DescriptionNVD

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by connecting to the affected system via Secure Shell (SSH) using the hard-coded credentials. A successful exploit could allow the attacker to access the underlying operating system as a low-privileged user. After low-level privileges are gained, the attacker could elevate to root privileges and take full control of the device. Cisco Bug IDs: CSCvc82982.

AnalysisAI

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. Rated high severity (CVSS 8.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by connecting to the affected system via Secure Shell (SSH) using the hard-coded credentials. A successful exploit could allow the attacker to access the underlying operating system as a low-privileged user. After low-level privileges are gained, the attacker could elevate to root privileges and take full control of the device. Cisco Bug IDs: CSCvc82982. Affected products include: Cisco Prime Collaboration, Cisco Prime Collaboration Assurance, Cisco Prime Collaboration Provisioning.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.

CVE-2018-15389 CRITICAL
9.8 Oct 05

A vulnerability in the install function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated,

CVE-2018-0321 CRITICAL
9.8 Jun 07

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to acces

CVE-2018-0320 CRITICAL
9.8 Jun 07

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated

CVE-2018-0319 CRITICAL
9.8 Jun 07

A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthe

CVE-2018-0318 CRITICAL
9.8 Jun 07

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenti

CVE-2018-0336 HIGH
8.8 Jun 07

A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated

CVE-2018-0322 HIGH
8.8 Jun 07

A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authentic

CVE-2018-0317 HIGH
8.8 Jun 07

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remot

CVE-2018-0335 HIGH
7.8 Jun 07

A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauth

CVE-2013-1125 MEDIUM
6.8 Feb 19

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application N

CVE-2013-1196 MEDIUM
6.8 Apr 29

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Direc

CVE-2016-1320 MEDIUM
6.7 Feb 12

The CLI in Cisco Prime Collaboration 9.0 and 11.0 allows local users to execute arbitrary OS commands as root by leverag

Share

CVE-2018-0141 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy