CVE-2015-6296

High

Published: 18/09/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2) has a default account that allows local users to gain root access by leveraging knowledge of the credentials.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system, posing a serious threat to the security of the organization's data and infrastructure.

Recommendation

It is recommended to disable the default account and change passwords to strong and unique ones for all system users.

Other vulnerabilities in Cisco Prime Network Registrar

CVE-2016-1427High
The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages.

Original NVD description (English source)

Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.