9.8

CVE-2018-0321: cisco prime_collaboration Improper Authentication

CVSS: 9.8v3.0CriticalModified
Published 07-06-2018Last modified 29-11-2024
Open JSON

Vulnerability summary

CVE-2018-0321 is a critical (CVSS 9.8) Improper Authentication vulnerability in cisco prime_collaboration. EPSS estimates a 3.50% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.0 (NVD)
EPSS score
3.50%
0%100%
Low · -0.07 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 07-06-2018
    PublishedVulnerability first disclosed.
  2. 29-11-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system. The vulnerability is due to an open port in the Network Interface and Configuration Engine (NICE) service. An attacker could exploit this vulnerability by accessing the open RMI system on an affected PCP instance. An exploit could allow the attacker to perform malicious actions that affect PCP and the devices that are connected to it. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd61746.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

3.50%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

-0.07 pp

From 3.57% on 18-09-2026

18-09-202618-10-2026
EPSS score
3.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco3 products

1 vendor · 3 products

References

3 links