CRITICAL✓ PATCH🇬🇧 English

CVE-2016-1291

CVSS 9.8v3.0pub. 2016-04-06upd. 2026-05-06

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Evolved Programmable Network Manager

    APP
    Cisco
    1.2.0

  • Cisco Prime Infrastructure

    APP
    Cisco
    1.21.2.0.1031.2.11.31.3.0.201.41.4.0.451.4.11.4.22.02.1.02.2

  • Sun Opensolaris

    OS
    Sun
    snv_124
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCEDeserialization
CWE
Referencje

Powiązane podatności

CVE-2019-15958CRITICAL9.8ten sam produkt

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Mana...

CVE-2018-15379CRITICAL9.8ten sam produkt

A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory pe...

CVE-2018-0258CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote ...

CVE-2016-1289CRITICAL9.8ten sam produkt

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allo...

CVE-2016-1329CRITICAL9.8ten sam produkt

Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(...