What’s Vulnerable › Vulnerabilities

CVE-2018-0318

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-07 · updated 2026-06-17
• Weakness: CWE-255

Description

A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device. The vulnerability is due to insufficient validation of a password reset request. An attacker could exploit this vulnerability by submitting a password reset request and changing the password for any user on an affected system. An exploit could allow the attacker to gain administrative-level privileges on the affected system. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 11.6 and prior. Cisco Bug IDs: CSCvd07245.

Affected products

• Cisco Prime Collaboration Provisioning unknown: through 12.1
• Cisco Prime Collaboration Provisioning: through 11.6

References

• http://www.securityfocus.com/bid/104434
• http://www.securitytracker.com/id/1041082
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-reset
• http://www.securityfocus.com/bid/104434
• http://www.securitytracker.com/id/1041082
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-prime-password-reset

Get alerted when CVE-2018-0318 or the next vulnerability affects your stack