Cisco Prime Network Control System vulnerabilities

5 CVEs affecting Cisco Prime Network Control System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0768, published 2015-06-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0768, published 2015-06-12. Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days. The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not properly implement AAA roles, which allows remote authenticated…
CVE-2012-5990, published 2013-09-06. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject…
CVE-2013-1170, published 2013-04-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The Cisco Prime Network Control System (NCS) appliance with software before 1.1.1.24 has a default password for the database user account, which makes it easier for remote attackers to change the…
CVE-2013-1196, published 2013-04-29. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System,…
CVE-2013-1125, published 2013-02-19. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network…