CVE-2018-0141

CVE-2018-0141 describes a critical vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6, stemming from a hard-coded account password. This flaw allows an unauthenticated, local attacker to gain low-privileged access to the underlying Linux operating system via SSH. A successful exploit could lead to full device control after privilege escalation, posing a significant risk to affected Cisco Prime Collaboration products. The vulnerability carries a CVSS score of 8.4 (HIGH), indicating high impact on confidentiality, integrity, and availability with low attack complexity. While there is no evidence of active exploitation (KEV: No) and no public exploit code (Metasploit, Nuclei, ExploitDB: None), the vulnerability has garnered some community discussion and media coverage. Its EPSS score is low, suggesting a low probability of exploitation in the wild, and it is currently inactive on the Hot List.