PT-2016-1646
CVE-2016-1291
·
تاريخ النشر
2016-04-06
·
تاريخ التحديث
2019-07-29
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco Evolved Programmable Network Manager versions 1.2
Cisco Prime Infrastructure versions 1.2.0 through 2.2(2)
Description
The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary code by sending a specially crafted HTTP POST request with deserialized data.
Recommendations
For Cisco Evolved Programmable Network Manager version 1.2, update to a version that addresses the issue.
For Cisco Prime Infrastructure versions 1.2.0 through 2.2(2), update to a version that addresses the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾