CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2016-1291

CVSS 9.8v3.0pub. 2016-04-06upd. 2026-05-06

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Cisco Evolved Programmable Network Manager

    APP
    Cisco
    1.2.0

  • Cisco Prime Infrastructure

    APP
    Cisco
    1.21.2.0.1031.2.11.31.3.0.201.41.4.0.451.4.11.4.22.02.1.02.2

  • Sun Opensolaris

    OS
    Sun
    snv_124
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCEDeserialization
CWE
References

Related vulnerabilities

CVE-2019-15958CRITICAL9.8PL ✓same product

RCE z uprawnieniami root w REST API Cisco Prime Infrastructure i EPNM

CVE-2018-15379CRITICAL9.8PL ✓same product

Cisco Prime Infrastructure — nieautoryzowany upload pliku przez TFTP (RCE)

CVE-2018-0258CRITICAL9.8PL ✓same product

Cisco Prime — path traversal i zdalne wykonanie kodu przez upload pliku

CVE-2016-1289CRITICAL9.8PL ✓same product

RCE i ujawnienie danych w API Cisco Prime Infrastructure i EPNM

CVE-2016-1329CRITICAL9.8PL ✓same product

Cisco NX-OS: Hardcoded credentials umożliwiające zdalny dostęp root