CVEvulnerability

CVE-2016-1427

7.5 HIGH Published 2016-06-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-287

Description

The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694.

Affected configurations

• cisco prime network registrar 8.2.0 • cisco prime network registrar 8.2.0.1 • cisco prime network registrar 8.2.0.2 • cisco prime network registrar 8.2.1 • cisco prime network registrar 8.2.1.1 • cisco prime network registrar 8.2.2 • cisco prime network registrar 8.2.2.1 • cisco prime network registrar 8.2.3 • cisco prime network registrar 8.3.0 • cisco prime network registrar 8.3.1

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-287 Improper Authentication weakness

References