CVEvulnerability

CVE-2016-1289

9.8 CRITICAL Published 2016-07-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-07-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.

Affected configurations

• cisco prime infrastructure 1.2 • cisco prime infrastructure 1.2.0.103 • cisco prime infrastructure 1.2.1 • cisco prime infrastructure 1.3 • cisco prime infrastructure 1.3.0.20 • cisco prime infrastructure 1.4 • cisco prime infrastructure 1.4.0.45 • cisco prime infrastructure 1.4.1 • cisco prime infrastructure 1.4.2 • cisco prime infrastructure 2.0 • cisco prime infrastructure 2.1.0 • cisco prime infrastructure 2.2 • cisco prime infrastructure 2.2\(2\) • cisco evolved programmable network manager 1.2.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References