CVE-2016-1360

HIGH 7.1CVE-2016-1360 · Published 12/03/2016 · updated 17/06/2026

In short

CVE-2016-1360 is a HIGH (CVSS 7.1) vulnerability affecting prime lan management solution (cisco).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 23.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
prime lan management solution cisco	`= 4.1_base= 4.2.1= 4.2.2= 4.2.3= 4.2.4= 4.2.5= 4.2_base`	No fix yet

Description

Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160310-prime-lms · Vendor Advisory
securitytracker.com/id/1035313

CVE-2016-1360

In short

Description

References

More vulnerabilities in prime lan management solution

CVE-2016-1360

In short

Description

References

More vulnerabilities in prime lan management solution