CVE-2016-1427

High

Published: 18/06/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages.

Risk Assessment

Attackers may gain access to sensitive data, potentially leading to further attacks or breaches of organizational privacy.

Recommendation

It is recommended to update Cisco Prime Network Registrar to the latest version to mitigate this vulnerability.

Other vulnerabilities in Cisco Prime Network Registrar

CVE-2015-6296High
Cisco Prime Network Registrar (CPNR) versions 8.1(3.3), 8.2(3), and 8.3(2) has a default account that allows local users to gain root access by leveraging knowledge of the credentials.

Original NVD description (English source)