| Package | Affected versions | Patched versions |
|---|---|---|
| evolved programmable network manager | = 1.2.0 | |
| prime infrastructure | = 1.2= 1.2.0.103= 1.2.1= 1.3= 1.3.0.20= 1.4= 1.4.0.45= 1.4.1= 1.4.2= 2.0= 2.1.0= 2.2= 2.2(2) |
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free