CVE-2020-3272: Cisco Prime Network Registrar

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

A vulnerability in the DHCP server of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of incoming DHCP traffic. An attacker could exploit this vulnerability by sending a crafted DHCP request to an affected device. A successful exploit could allow the attacker to cause a restart of the DHCP server process, causing a DoS condition.

Affected products

• Cisco Prime Network Registrar: from 8.3, before 8.3.7.1 (fixed in 8.3.7.1); from 9.0, before 9.1.3 (fixed in 9.1.3); from 10.0, before 10.1.0.1 (fixed in 10.1.0.1)

Published 2020-05-22. Last modified 2026-06-17.