Remote Code Execution Vulnerability in Cisco Prime Infrastructure and EPNM

CVE-2016-1291

Summary

A vulnerability exists in Cisco Prime Infrastructure versions 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager 1.2, which allows remote attackers to exploit crafted deserialized data in an HTTP POST request, enabling them to execute arbitrary code on the affected systems. This significant security issue arises from improper handling of input data, potentially leading to unauthorized access or control over the network management devices.

References