CVE-2016-1427

EUVD-2016-2526
The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network Registrar 8.2 before 8.2.3.1 and 8.3 before 8.3.2 allows remote attackers to obtain sensitive information via crafted SCP messages, aka Bug ID CSCuv35694.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
ciscoprime_network_registrar
8.2.0
ciscoprime_network_registrar
8.2.0.1
ciscoprime_network_registrar
8.2.0.2
ciscoprime_network_registrar
8.2.1
ciscoprime_network_registrar
8.2.1.1
ciscoprime_network_registrar
8.2.2
ciscoprime_network_registrar
8.2.2.1
ciscoprime_network_registrar
8.2.3
ciscoprime_network_registrar
8.3.0
ciscoprime_network_registrar
8.3.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-pnr
http://www.securitytracker.com/id/1036128
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-pnr
http://www.securitytracker.com/id/1036128