Cisco Cns Network Registrar vulnerabilities

4 CVEs affecting Cisco Cns Network Registrar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2155, published 2014-04-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2011-2024, published 2011-06-02. High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days. Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a TCP session, aka Bug ID CSCsm50627.
CVE-2014-2155, published 2014-04-19. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6 packet, aka Bug ID CSCuo07437.
CVE-2004-1164, published 2005-01-10. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."
CVE-2004-1163, published 2005-01-10. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after…