Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

prime network registrar vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-1427
The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 prior to 8.2.3.1 and 8.3 prior to 8.3.2 allows remote malicious users to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694.
Cisco Prime Network Registrar 8.3.1Cisco Prime Network Registrar 8.2.0.2Cisco Prime Network Registrar 8.2.0.1Cisco Prime Network Registrar 8.2.1.1Cisco Prime Network Registrar 8.2.1Cisco Prime Network Registrar 8.3.0Cisco Prime Network Registrar 8.2.3Cisco Prime Network Registrar 8.2.0Cisco Prime Network Registrar 8.2.2.1Cisco Prime Network Registrar 8.2.2
5
CVSSv2
CVE-2017-6613
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote malicious user to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) condition on the affected system. The v...
Cisco Prime Network Registrar 8.3.3Cisco Prime Network Registrar 8.3.4Cisco Prime Network Registrar 8.3.2Cisco Prime Network Registrar 8.3.1Cisco Prime Network Registrar 8.3.0
7.2
CVSSv2
CVE-2015-6296
Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.
Cisco Prime Network Registrar 8.2.3Cisco Prime Network Registrar 8.3.2Cisco Prime Network Registrar 8.1.3.3
4.3
CVSSv2
CVE-2013-3394
Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a crafted field, aka Bug ID CSCuh41429.
Cisco Prime Network RegistrarCisco Prime Network Registrar 8.0
4.3
CVSSv2
CVE-2020-3148
A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections in the w...
Cisco Prime Network Registrar
7.8
CVSSv2
CVE-2020-3272
A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming DHCP traffic. An att...
Cisco Prime Network Registrar
7.8
CVSSv2
CVE-2019-1840
A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote malicious user to restart the server and cause a denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete user-supp...
Cisco Prime Network Registrar
4.3
CVSSv2
CVE-2019-1852
A vulnerability in the web-based management interface of Cisco Prime Network Registrar could allow an unauthenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validati...
Cisco Network Registrar 9.1\\(2\\)
7.5
CVSSv2
CVE-2015-6420
Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Service, and Acceleration; Network and Content Security Devices; Network Management and Provisioning; Routing and Switching - Enterprise and Se...
Apache Commons CollectionsApache Commons Collections 4.0
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook