cisco-sa-20190417-pnr-dos: Cisco Prime Network Registrar Denial of Service Vulnerability
First published: Wed Apr 17 2019(Updated: )
A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and cause a denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete user-supplied input validation when a custom extension attempts to change a DHCPv6 packet received by the application. An attacker could exploit this vulnerability by sending malformed DHCPv6 packets to the application. An exploit could allow the attacker to trigger a restart of the service which, if exploited repeatedly, might lead to a DoS condition. This vulnerability can only be exploited if the administrator of the server has previously installed custom extensions that attempt to modify the packet details before the packet has been processed. Note: Although the CVSS score matches a High SIR, this has been lowered to Medium because this condition will only affect an application that has customer-developed extensions that will attempt to modify packet parameters before the packet has been completely sanitized. If packet modification in a custom extension happens after the packet has been sanitized, the application will not be affected by this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190417-pnr-dos
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Network Registrar Major |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190417-pnr-dos?
The cisco-sa-20190417-pnr-dos vulnerability has a high severity rating due to its potential to cause a denial of service.
How do I fix cisco-sa-20190417-pnr-dos?
To fix the cisco-sa-20190417-pnr-dos vulnerability, update your Cisco Prime Network Registrar to the latest version as recommended by Cisco.
What systems are affected by cisco-sa-20190417-pnr-dos?
The cisco-sa-20190417-pnr-dos vulnerability affects Cisco Prime Network Registrar.
Can cisco-sa-20190417-pnr-dos be exploited remotely?
Yes, the cisco-sa-20190417-pnr-dos vulnerability can be exploited by unauthenticated remote attackers.
What kind of attack can cisco-sa-20190417-pnr-dos enable?
The cisco-sa-20190417-pnr-dos vulnerability can enable attackers to restart the server, leading to a denial of service condition.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/title
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco prime network registrar major