Cisco Prime Network Registrar — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Prime Network Registrar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2019-1840 — CVSS 8.6 (high): A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to…
• CVE-2016-1427 — CVSS 7.5 (high): The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2…
• CVE-2023-44487 — CVSS 7.5 (high) — actively exploited: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly…
• CVE-2020-3272 — CVSS 7.5 (high): A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of…
• CVE-2015-6296 — CVSS 7.2 (high): Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by…
• CVE-2020-3148 — CVSS 7.1 (high): A vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) could allow an unauthenticated, remote attacker to…
• CVE-2017-6613 — CVSS 5.8 (medium): A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to…
• CVE-2013-3394 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to…