CVE-2018-0141 Hardcoded credentials in Cisco Prime Collaboration Provisioning

High 8.4 Published 8 Mar 2018 Updated 2 Dec 2024

Hardcoded credentials allow unauthenticated local attackers to access the underlying Linux OS and escalate privileges to root.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0141?

CVE-2018-0141 is a high-severity vulnerability in Cisco Prime Collaboration Provisioning, published on 8 Mar 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in Cisco Prime Collaboration Provisioning (PCP) Software 11.6 could allow an unauthenticated, local attacker to log in to the underlying Linux operating system. The vulnerability is due to a hard-coded account password on the system. An attacker could exploit this vulnerability by connecting to the affected system via Secure Shell (SSH) using the hard-coded credentials. A successful exploit could allow the attacker to access the underlying operating system as a low-privileged user. After low-level privileges are gained, the attacker could elevate to root privileges and take full control of the device. Cisco Bug IDs: CSCvc82982.

Weakness: CWE-798

Which versions are affected by CVE-2018-0141?

It affects 3 products.

Products include Cisco Prime Collaboration, Cisco Prime Collaboration Assurance, Cisco Prime Collaboration Provisioning.

How do I fix CVE-2018-0141?

No fix has been published for CVE-2018-0141 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0141 being exploited?

There is no known exploitation of CVE-2018-0141 in the wild and no public exploit code.

Sources

Also known as GHSA-mx4m-2wwh-7g8m.