CVE-2015-0768: The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58)...

Security readout for executives and security teams

Cisco Prime NCS had an access-control flaw in Device Work Center. A logged-in user could bypass intended AAA role restrictions and run commands they should not be allowed to run. This matters most where older Prime NCS systems are still reachable by broad user groups. Exposure is limited to organizations still running the listed Cisco Prime NCS versions, especially where the management interface is reachable beyond tightly controlled administrator networks. Treat as a targeted management-plane risk. Prioritize if affected Prime NCS versions remain in production or are accessible by many authenticated users. Mitigation focus: Check Cisco advisory for fixed versions or official workarounds.; Upgrade or retire affected Cisco Prime NCS versions per vendor guidance.; Restrict Prime NCS management access to trusted admin networks..

Prepared

Jun 13, 2026, 22:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.