CVE-2015-6296 Hardcoded credentials in n/a
Local attackers can gain root access to Cisco Prime Network Registrar by using default account credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-6296?
CVE-2015-6296 is a high-severity vulnerability in n/a, published on 18 Sep 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.
Weakness: CWE-264
Which versions are affected by CVE-2015-6296?
It affects 1 product.
Products include Cisco Prime Network Registrar.
How do I fix CVE-2015-6296?
No fix has been published for CVE-2015-6296 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-6296 being exploited?
There is no known exploitation of CVE-2015-6296 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2019-1840 Cisco Prime Network Registrar Denial of Service Vulnerability
- CVE-2020-3272 Cisco Prime Network Registrar DHCP Denial of Service Vulnerability
- CVE-2016-1427 Information disclosure in n/a
- CVE-2020-3148 Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability
- CVE-2017-6613 Denial of service in Cisco Prime Network Registrar
Sources
Also known as GHSA-xpm4-fqq7-59gc.