CVE-2016-1289
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.
| Software | From | Fixed in |
|---|---|---|
| cisco / prime_infrastructure | 1.4.2 | 1.4.2.x |
| cisco / prime_infrastructure | 2.2 | 2.2.x |
| cisco / prime_infrastructure | 1.2.1 | 1.2.1.x |
| cisco / prime_infrastructure | 2.1.0 | 2.1.0.x |
| cisco / prime_infrastructure | 1.3.0.20 | 1.3.0.20.x |
| cisco / prime_infrastructure | 1.2.0.103 | 1.2.0.103.x |
| cisco / prime_infrastructure | 2.2(2) | 2.2(2).x |
| cisco / prime_infrastructure | 1.4.0.45 | 1.4.0.45.x |
| cisco / prime_infrastructure | 1.4.1 | 1.4.1.x |
| cisco / prime_infrastructure | 1.2 | 1.2.x |
| cisco / prime_infrastructure | 1.3 | 1.3.x |
| cisco / prime_infrastructure | 1.4 | 1.4.x |
| cisco / prime_infrastructure | 2.0 | 2.0.x |
| cisco / evolved_programmable_network_manager | 1.2.0 | 1.2.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime