CVE-2020-3272: Cisco Prime Network Registrar DHCP Denial of Service Vulnerability

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-22 · updated 2026-06-17
Weakness: CWE-20

Description

A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming DHCP traffic. An attacker could exploit this vulnerability by sending a crafted DHCP request to an affected device. A successful exploit could allow the attacker to cause a restart of the DHCP server process, causing a DoS condition.

Affected products

Cisco Prime Network Registrar: from 8.3 before 8.3.7.1; from 9.0 before 9.1.3; from 10.0 before 10.1.0.1 — fixed in 10.1.0.1, 8.3.7.1, 9.1.3

How to fix

Upgrade to a fixed version: Cisco Prime Network Registrar 10.1.0.1, 8.3.7.1, 9.1.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-3272 or the next vulnerability affects your stack