CVE-2017-3871
MEDIUMCisco Prime Optical <10.6.0.1 - Info Disclosure
Title source: llmDescription
A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, remote attacker to disclose sensitive information in the configuration generated for a device. The attacker must have valid credentials for the device. More Information: CSCvc65257. Known Affected Releases: 10.6(0.1).
Scores
CVSS v3
4.3
EPSS
0.0014
EPSS Percentile
34.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (2)
cisco/prime_optical
n/a/Cisco Prime Optical for Service Providers
< Cisco Prime Optical for Service Providers
Timeline
Published
Mar 17, 2017
Tracked Since
Feb 18, 2026