Remote Code Execution Vulnerability in Cisco Prime Infrastructure and EPNM
CVE-2016-1291

9.8CRITICAL

Key Information:

Vendor: Cisco
Status: Prime Infrastructure; Opensolaris; Evolved Programmable Network Manager
Vendor: CVE Published:; 6 April 2016

What is CVE-2016-1291?

A vulnerability exists in Cisco Prime Infrastructure versions 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager 1.2, which allows remote attackers to exploit crafted deserialized data in an HTTP POST request, enabling them to execute arbitrary code on the affected systems. This significant security issue arises from improper handling of input data, potentially leading to unauthorized access or control over the network management devices.