CVE-2016-1291 Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST...
CriticalCVSS 9.8
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco evolved programmable network manager | = 1.2.0 | No fix listed |
| cisco prime infrastructure | = 1.2 | No fix listed |
| cisco prime infrastructure | = 1.2.0.103 | No fix listed |
| cisco prime infrastructure | = 1.2.1 | No fix listed |
| cisco prime infrastructure | = 1.3 | No fix listed |
| cisco prime infrastructure | = 1.3.0.20 | No fix listed |
| cisco prime infrastructure | = 1.4 | No fix listed |
| cisco prime infrastructure | = 1.4.0.45 | No fix listed |
| cisco prime infrastructure | = 1.4.1 | No fix listed |
| cisco prime infrastructure | = 1.4.2 | No fix listed |
| cisco prime infrastructure | = 2.0 | No fix listed |
| cisco prime infrastructure | = 2.1.0 | No fix listed |
| cisco prime infrastructure | = 2.2 | No fix listed |
| sun opensolaris | = snv_124 | No fix listed |
References
- 20160406 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability vendor-advisory
- 1035497 vdb-entry
- blogs.securiteam.com third-party-advisory vdb-entry