{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-29T08:59:30.926","vulnerabilities":[{"cve":{"id":"CVE-2018-0141","sourceIdentifier":"psirt@cisco.com","published":"2018-03-08T07:29:00.283","lastModified":"2024-11-21T03:37:36.077","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by connecting to the affected system via Secure Shell (SSH) using the hard-coded credentials. A successful exploit could allow the attacker to access the underlying operating system as a low-privileged user. After low-level privileges are gained, the attacker could elevate to root privileges and take full control of the device. Cisco Bug IDs: CSCvc82982."},{"lang":"es","value":"Una vulnerabilidad en Cisco Prime Collaboration Provisioning (PCP) Software 11.6 podría permitir que un atacante local no autenticado inicie sesión en el sistema operativo Linux subyacente. Esta vulnerabilidad se debe a una contraseña de cuenta embebida en el sistema. Un atacante podría explotar esta vulnerabilidad conectándose al sistema afectado mediante SSH (Secure Shell) utilizando las credenciales embebidas. Una explotación con éxito podría permitir que el atacante acceda al sistema operativo subyacente como usuario con privilegios bajos. Después de que se obtengan los privilegios de bajo nivel, el atacante podría elevarlos a root y tomar el control total del dispositivo. Cisco Bug IDs: CSCvc82982."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","baseScore":7.2,"accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":3.9,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-798"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-798"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration:11.6:*:*:*:*:*:*:*","matchCriteriaId":"70DCE38C-AD35-407E-8D2C-20A03D81882B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_assurance:11.6:*:*:*:*:*:*:*","matchCriteriaId":"458DF130-A84C-49E2-B2B2-4FCB4C990A9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:prime_collaboration_provisioning:11.6:*:*:*:*:*:*:*","matchCriteriaId":"E16A5F3D-1F91-401F-AD75-7C1F1E570FB5"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/103329","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040462","source":"psirt@cisco.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-cpcp","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103329","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040462","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-cpcp","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}