CVE-2015-6296

2015-09-1822:59:03

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.

Affected configurations

Nvd

Node

ciscoprime_network_registrarMatch8.1.3.3

ciscoprime_network_registrarMatch8.2.3

ciscoprime_network_registrarMatch8.3.2

VendorProductVersionCPE
ciscoprime_network_registrar8.1.3.3cpe:2.3:a:cisco:prime_network_registrar:8.1.3.3:*:*:*:*:*:*:*
ciscoprime_network_registrar8.2.3cpe:2.3:a:cisco:prime_network_registrar:8.2.3:*:*:*:*:*:*:*
ciscoprime_network_registrar8.3.2cpe:2.3:a:cisco:prime_network_registrar:8.3.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	prime_network_registrar	8.1.3.3	cpe:2.3:a:cisco:prime_network_registrar:8.1.3.3:::::::*
cisco	prime_network_registrar	8.2.3	cpe:2.3:a:cisco:prime_network_registrar:8.2.3:::::::*
cisco	prime_network_registrar	8.3.2	cpe:2.3:a:cisco:prime_network_registrar:8.3.2:::::::*