CVE-2016-1291

NONE EPSS 93.2%
Published Apr 6, 201610y ago · Modified Jun 17, 20262w ago
Find Similar
Published Apr 6, 2016 10y ago
Last Modified Jun 17, 2026 2w ago

Description

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

Threat Intelligence

EPSS Exploit Probability
93.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-20 Improper Input Validation Validation

Affected Products 14

VendorProductVersionRange
ciscoevolved_programmable_network_manager1.2.0any
ciscoprime_infrastructure1.2any
ciscoprime_infrastructure1.2.0.103any
ciscoprime_infrastructure1.2.1any
ciscoprime_infrastructure1.3any
ciscoprime_infrastructure1.3.0.20any
ciscoprime_infrastructure1.4any
ciscoprime_infrastructure1.4.0.45any
ciscoprime_infrastructure1.4.1any
ciscoprime_infrastructure1.4.2any
ciscoprime_infrastructure2.0any
ciscoprime_infrastructure2.1.0any
ciscoprime_infrastructure2.2any
sunopensolarissnv_124any

References 3

  • tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode
    Vendor Advisory
  • securitytracker.com http://www.securitytracker.com/id/1035497
  • blogs.securiteam.com https://blogs.securiteam.com/index.php/archives/2727
    Third Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.