CVE-2016-1291: Input Validation
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1291?
CVE-2016-1291 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2016-1291?
To fix CVE-2016-1291, it is recommended to upgrade to a patched version of Cisco Prime Infrastructure or Cisco Evolved Programmable Network Manager.
Which versions are affected by CVE-2016-1291?
CVE-2016-1291 affects Cisco Prime Infrastructure version 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager version 1.2.
Can CVE-2016-1291 be exploited remotely?
Yes, CVE-2016-1291 can be exploited remotely by attackers through crafted HTTP POST requests.
What types of attacks can CVE-2016-1291 allow?
CVE-2016-1291 allows attackers to execute arbitrary code on the vulnerable systems.