CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Use of Hard-coded Credentials
Summary: a vulnerability in the install function of cisco prime collaboration provisioning (pcp) could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. the vulnerability is due to a hard-coded password that, in some cases, is not replaced with a unique password. a successful exploit could allow the attacker to access the administrative web interface with administrator-level privileges.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-10-05
Last Modified Date: 2019-10-09