CVE-2018-0320: A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary…

PriorityP267critical9.8CVSS 3.0

AVNACLPRNUINSUCHIHAH

EPSS

4.06%

89.5th percentile

A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The vulnerability is due to a lack of proper validation on user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending crafted URLs that contain malicious SQL statements to the affected application. This vulnerability affects Cisco Prime Collaboration Provisioning (PCP) Releases 12.1 and prior. Cisco Bug IDs: CSCvd61754.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	prime_collaboration	<= 12.1	—
cisco	prime_collaboration_provisioning	<= 12.1	—
cisco	prime_collaboration_provisioning	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Detect SQL injection attempts targeting Cisco PCP by monitoring for crafted URLs containing malicious SQL statements sent to the application's web framework ↗
→The attack vector is unauthenticated and remote — monitor for SQL injection patterns in HTTP request URLs targeting Cisco Prime Collaboration Provisioning (PCP) endpoints, no authentication required ↗

·Vulnerability affects Cisco PCP releases 12.1 and prior; ensure patched versions are deployed as there are no workarounds ↗
·No workarounds exist for this vulnerability; software update is the only remediation path ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

vendor_cisco8.1HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.