CVE-2018-0204: Buffer Overflow

Published Feb 22, 2018

Updated

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by using a brute-force attack (Repeated Bad Login Attempts). A successful exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore access. Cisco Bug IDs: CSCvd07264.

Affected Software

1 affected component

Cisco Prime Collaboration Provisioning=12.1

Event History

Feb 22, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-0204?

CVE-2018-0204 is a vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool that could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users.

What is the severity of CVE-2018-0204?

The severity of CVE-2018-0204 is high, with a CVSS score of 7.5.

How can an attacker exploit CVE-2018-0204?

An attacker can exploit CVE-2018-0204 by using weak login controls in the web portal of the Cisco Prime Collaboration Provisioning Tool.

What are the affected software versions of CVE-2018-0204?

CVE-2018-0204 affects Cisco Prime Collaboration Provisioning Tool version 12.1.

How can I fix CVE-2018-0204?

To fix CVE-2018-0204, users should apply the patches and updates provided by Cisco.