CVE-2018-0321
First published: Thu Jun 07 2018(Updated: )
A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to an open port in the Network Interface and Configuration Engine (NICE) service. An attacker could exploit this vulnerability by accessing the open RMI system on an affected PCP instance. An exploit could allow the attacker to perform malicious actions that affect PCP and the devices that are connected to it. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd61746.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Collaboration | <=11.6 | |
| Cisco Prime Collaboration Assurance | <=11.6 | |
| Cisco Prime Collaboration Provisioning | <=11.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0321?
The severity of CVE-2018-0321 is critical, with a severity value of 9.8.
How can an attacker exploit CVE-2018-0321?
An attacker can exploit CVE-2018-0321 by accessing the Java Remote Method Invocation (RMI) system through an open port in the Network Interface and Configuration Engine (NICE) service.
Which software versions of Cisco Prime Collaboration are affected by CVE-2018-0321?
The affected software versions of Cisco Prime Collaboration are up to and inclusive of 11.6.
Where can I find more information about CVE-2018-0321?
You can find more information about CVE-2018-0321 in the following references: [SecurityFocus](http://www.securityfocus.com/bid/104409), [SecurityTracker](http://www.securitytracker.com/id/1041085), [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-rmi).
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-0321?
The Common Weakness Enumeration (CWE) ID for CVE-2018-0321 is CWE-287.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco prime collaboration
- version/cisco prime collaboration/11.6
- canonical/cisco prime collaboration assurance
- version/cisco prime collaboration assurance/11.6
- canonical/cisco prime collaboration provisioning
- version/cisco prime collaboration provisioning/11.6