CVE-2016-1289: Buffer Overflow
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1289?
CVE-2016-1289 is rated as critical due to its potential to allow remote code execution and exposure of sensitive information.
How do I fix CVE-2016-1289?
To fix CVE-2016-1289, update your Cisco Prime Infrastructure and Evolved Programmable Network Manager to the latest versions provided by Cisco.
What systems are affected by CVE-2016-1289?
CVE-2016-1289 affects Cisco Prime Infrastructure versions 1.2 through 3.0 and Cisco Evolved Programmable Network Manager version 1.2.
What kind of attack can exploit CVE-2016-1289?
CVE-2016-1289 can be exploited through crafted HTTP requests that lead to arbitrary code execution or exposure of management credentials.
Are there any mitigations for CVE-2016-1289?
There are no specific mitigations recommended for CVE-2016-1289 other than applying the security updates from Cisco.