PT-2016-4779 · Cisco · Cisco Prime Network Registrar

Publicado 2016-06-18 · Atualizado 2016-11-30 · CVE-2016-1427

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Prime Network Registrar versions 8.2 before 8.2.3.1 Cisco Prime Network Registrar versions 8.3 before 8.3.2

Description The System Configuration Protocol core messaging interface allows remote attackers to obtain sensitive information via crafted messages.

Recommendations For Cisco Prime Network Registrar version 8.2, update to version 8.2.3.1 or later. For Cisco Prime Network Registrar version 8.3, update to version 8.3.2 or later.

Correção

Improper Authentication

Information Disclosure

Enumeração de Fraquezas

CWE-287

CWE-200

Identificadores relacionados

CVE-2016-1427

Produtos afetados

Cisco Prime Network Registrar

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-1427 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1427 · Aviso do Fabricante
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-pnr · Aviso do Fabricante
• http://securitytracker.com/id/1036128 · Nota