CVE-2020-3148

Cisco Prime Network Registrar CSRF (CVE-2020-3148) affects the web-based interface due to insufficient CSRF protections. An unauthenticated, remote attacker can entice a user with an active admin session to click a malicious link, potentially changing configuration (including user accounts) and a...

CVE-2015-6296

Cisco Prime Network Registrar CPNR 8.13.3, 8.23, and 8.32 has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825...

CVE-2015-6296

CVE-2015-6296 affects Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2). A default/insecure local account exists, enabling an authenticated, local attacker to obtain root privileges on the affected device. Cisco’s advisory notes that software updates are not available to ...