PT-2018-8751 · Cisco · Cisco Prime Collaboration Provisioning

Publicado 2018-06-07 · Atualizado 2019-10-09 · CVE-2018-0321

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning versions 11.6 and prior

Description A vulnerability in Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access the Java Remote Method Invocation (RMI) system due to an open port in the Network Interface and Configuration Engine (NICE) service. An attacker could exploit this vulnerability by accessing the open RMI system, allowing them to perform malicious actions that affect the system and connected devices.

Recommendations For versions 11.6 and prior, update to a version later than 11.6 to resolve the issue. As a temporary workaround, consider restricting access to the open RMI system in the NICE service to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-0321

Produtos afetados

Cisco Prime Collaboration Provisioning

Referências · 5

• http://securitytracker.com/id/1041085 · Nota
• http://securityfocus.com/bid/104409 · Nota
• https://osv.dev/vulnerability/CVE-2018-0321 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0321 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-rmi · Aviso do Fabricante