VULNERABILITY INTELLIGENCE

CVE-2016-1291

CVSS score9.8 CRITICAL
EPSS probability6.77%
CISA KEVNot currently listed
Published2016-04-06
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references