CVE-2015-6296

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-18 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account, which allows local users to obtain root access by leveraging knowledge of the credentials, aka Bug ID CSCuw21825.

Affected products

Cisco Prime Network Registrar: 8.1.3.3, 8.2.3, 8.3.2

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=41041
http://www.securitytracker.com/id/1033613
http://tools.cisco.com/security/center/viewAlert.x?alertId=41041
http://www.securitytracker.com/id/1033613

Get alerted when CVE-2015-6296 or the next vulnerability affects your stack