CVE-2016-1442: Input Validation
Published Jul 7, 2016
·Updated
The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280.
Affected Software
2 affected components
cisco Prime Infrastructure=3.0
cisco Prime Infrastructure=3.1
Event History
Jul 7, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1442?
CVE-2016-1442 has a severity rating of high due to its potential for remote command execution.
2
How do I fix CVE-2016-1442?
The mitigation for CVE-2016-1442 involves upgrading Cisco Prime Infrastructure to version 3.1.1 or later.
3
Who is affected by CVE-2016-1442?
CVE-2016-1442 affects remote authenticated users of Cisco Prime Infrastructure versions 3.0 and 3.1.
4
What impact does CVE-2016-1442 have?
CVE-2016-1442 allows remote authenticated users to execute arbitrary commands, potentially compromising the system.
5
Is CVE-2016-1442 actively exploited?
There have been reported cases of CVE-2016-1442 being exploited in the wild, increasing the urgency for remediation.