CVE-2018-0204CWE-119

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of…

published February 22, 2018

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for individual users. The vulnerability is due to weak login controls. An attacker could exploit this vulnerability by using a brute-force attack (Repeated Bad Login Attempts). A successful exploit could allow the attacker to restrict user access. Manual administrative intervention is required to restore access. Cisco Bug IDs: CSCvd07264.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02340 · 83.5th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2018-02-22T00:00Z
EPSS history
Timeline
  • 22 FEB 00:00Z
    A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning Tool could allow an unauthenticated, remote attacker to create a denial of…
    cvelistv5