Resource management flaw in Cisco Prime Network Registrar
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete DNS packet header validation when the packet is received by the application. An attacker could exploit this vulnerability by sending a malformed DNS packet to the application. An exploit could allow the attacker to cause the DNS process to restart, which could lead to a DoS condition. This vulnerability affects Cisco Prime Network Registrar on all software versions prior to 8.3.5. Cisco Bug IDs: CSCvb55412.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco Prime Network Registrar | Cisco Prime Network Registrar | — | No fix listed | CNA |
- Cisco Prime Network Registrar Vendor— Affected Cisco Prime Network Registrar Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:prime_network_registrar:8.3.0:*:*:*:*:*:*:* | 8.3.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:prime_network_registrar:8.3.1:*:*:*:*:*:*:* | 8.3.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:prime_network_registrar:8.3.2:*:*:*:*:*:*:* | 8.3.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:prime_network_registrar:8.3.3:*:*:*:*:*:*:* | 8.3.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:prime_network_registrar:8.3.4:*:*:*:*:*:*:* | 8.3.4 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:prime_network_registrar:8.3.0:*:*:*:*:*:*:* Versions 8.3.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:prime_network_registrar:8.3.1:*:*:*:*:*:*:* Versions 8.3.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:prime_network_registrar:8.3.2:*:*:*:*:*:*:* Versions 8.3.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:prime_network_registrar:8.3.3:*:*:*:*:*:*:* Versions 8.3.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:prime_network_registrar:8.3.4:*:*:*:*:*:*:* Versions 8.3.4 Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-6613
- 2026-10-03 Alias added: GHSA-3rvq-jp9x-cxmh
References
More Cisco Prime Network Registrar vulnerabilities
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2019-01463 Cisco Prime Network Registrar Denial of Service Vulnerability CVSS 3.0HIGH 8.6
- TI-2020-02830 Cisco Prime Network Registrar DHCP Denial of Service Vulnerability CVSS 3.1HIGH 7.5
- TI-2016-01315 The System Configuration Protocol (SCP) core messaging interface in Cisco Prime Network… CVSS 3.0HIGH 7.5
- TI-2020-02710 Cisco Prime Network Registrar Cross-Site Request Forgery Vulnerability CVSS 3.1HIGH 7.1
- TI-2015-05283 Cisco Prime Network Registrar (CPNR) 8.1(3.3), 8.2(3), and 8.3(2) has a default account… CVSS 2.0HIGH 7.2
Sources
- CVE-2017-6613 · CVE Program
- CVE-2017-6613 · NVD
- FIRST EPSS
- GHSA-3rvq-jp9x-cxmh · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences