CVE-2018-0321: Critical severity cisco prime collaboration vulnerability
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to an open port in the Network Interface and Configuration Engine (NICE) service. An attacker could exploit this vulnerability by accessing the open RMI system on an affected PCP instance. An exploit could allow the attacker to perform malicious actions that affect PCP and the devices that are connected to it. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd61746.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0321?
The severity of CVE-2018-0321 is critical, with a severity value of 9.8.
How can an attacker exploit CVE-2018-0321?
An attacker can exploit CVE-2018-0321 by accessing the Java Remote Method Invocation (RMI) system through an open port in the Network Interface and Configuration Engine (NICE) service.
Which software versions of Cisco Prime Collaboration are affected by CVE-2018-0321?
The affected software versions of Cisco Prime Collaboration are up to and inclusive of 11.6.
Where can I find more information about CVE-2018-0321?
You can find more information about CVE-2018-0321 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/104409), [SecurityTracker](http://www.securitytracker.com/id/1041085), [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-rmi).
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-0321?
The Common Weakness Enumeration (CWE) ID for CVE-2018-0321 is CWE-287.