CVE-2020-3148

CVE-2020-3148 describes a Cross-Site Request Forgery (CSRF) vulnerability in the web-based interface of Cisco Prime Network Registrar (CPNR) due to insufficient CSRF protections. This vulnerability carries a CVSS score of 7.1 (HIGH) and allows an unauthenticated, remote attacker to trick an authenticated administrative user into clicking a malicious link. A successful exploit could lead to unauthorized configuration changes, including the creation or modification of user accounts of any privilege level, potentially impacting network service availability. While there is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, the vulnerability has garnered some community discussion and media coverage.