Prime Network Registrar (Cisco) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 65 known versions, newest CVE from 2023-10-10. Vendor: Cisco.

CVEs of Prime Network Registrar

• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2020-3272 - CVSS 7.5 (high), 2020-05-22: A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS)…
• CVE-2020-3148 - CVSS 7.1 (high), 2020-03-04: A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to conduct a cross-site…
• CVE-2019-1840 - CVSS 8.6 (high), 2019-04-18: A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server…
• CVE-2017-6613 - CVSS 5.8 (medium), 2017-04-20: A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process…
• CVE-2016-1427 - CVSS 7.5 (high), 2016-06-18: The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote…
• CVE-2015-6296 - CVSS 7.2 (high), 2015-09-18: Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging…
• CVE-2013-3394 - CVSS 4.3 (medium), 2013-11-27: Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web…