CVE-2019-1823: Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-1823.
What is the severity level of CVE-2019-1823?
The severity level of CVE-2019-1823 is Critical with a CVSS score of 7.2.
Which products are affected by CVE-2019-1823?
The products affected by CVE-2019-1823 are Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager.
How does CVE-2019-1823 exploit work?
CVE-2019-1823 allows an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system.
How can I fix the CVE-2019-1823 vulnerability?
To fix the CVE-2019-1823 vulnerability, it is recommended to apply the necessary security updates provided by Cisco.