cisco-sa-20180502-prime-upload: Cisco Prime File Upload Servlet Path Traversal and Remote Code Execution Vulnerability
Published May 2, 2018
·Updated
Credit
Tenable Inc..
Affected Software
2 affected componentsFixes available
Cisco DCNM Major=10.2, <Affected; migrate to 10.3(1), =10.1, <Affected; migrate to 10.3(1), =10.0, <Affected; migrate to 10.3(1)
Affected; migrate to 10.3(1)Affected; migrate to 10.3(1)Affected; migrate to 10.3(1)
Cisco PI Major=3.1, <3.1.7 Update 01, =Prior to 3.1, <Affected; migrate to 3.1.7 Update 01
3.1.7 Update 01Affected; migrate to 3.1.7 Update 01
Event History
May 2, 2018
Advisory Published
via Cisco·04:00 PM
Frequently Asked Questions
1
What is the severity of cisco-sa-20180502-prime-upload?
The severity of cisco-sa-20180502-prime-upload is critical with a CVSS score of 9.8.
2
How do I fix cisco-sa-20180502-prime-upload?
To fix cisco-sa-20180502-prime-upload, update to the latest version of Cisco Prime Infrastructure or Cisco DCNM that addresses this vulnerability.
3
What systems are affected by cisco-sa-20180502-prime-upload?
The affected systems for cisco-sa-20180502-prime-upload include Cisco Prime Infrastructure and Cisco DCNM Major versions.
4
What type of vulnerability is cisco-sa-20180502-prime-upload?
cisco-sa-20180502-prime-upload is a path traversal vulnerability that allows remote code execution.
5
Can cisco-sa-20180502-prime-upload be exploited without authentication?
Yes, cisco-sa-20180502-prime-upload can be exploited without authentication, making it especially critical.