CVE-2018-0321 is a critical vulnerability in Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior, allowing unauthenticated remote attackers to access the Java Remote Method Invocation (RMI) system due to an open port in the NICE service. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low complexity, enabling attackers to achieve full compromise (confidentiality, integrity, and availability) of PCP and connected devices. While not listed in CISA KEV, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and community discussion and media coverage indicate limited, but present, attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 11.6CPE matchmatch criteria | cpe:2.3:a:cisco:prime_collaboration:*:*:*:*:*:*:*:* | ||
<= 11.6CPE matchmatch criteria | cpe:2.3:a:cisco:prime_collaboration_assurance:*:*:*:*:*:*:*:* | ||
<= 11.6CPE matchmatch criteria | cpe:2.3:a:cisco:prime_collaboration_provisioning:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.