CVE-2015-6296

Published: Sep 18, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.

Affected (3)

Products: Cisco: Prime Network Registrar

Cisco

1 product

Prime Network Registrar

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Network Registrar	Version 8.1.3.3
Cisco Prime Network Registrar	Version 8.2.3
Cisco Prime Network Registrar	Version 8.3.2

Related CWEs

CWE-264

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=41041

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033613

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://tools.cisco.com/security/center/viewAlert.x?alertId=41041

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033613

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.