CVE-2014-0679

Published: Feb 27, 2014Modified: Apr 29, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with root privileges via an unspecified URL, aka Bug ID CSCum71308.

Affected (6)

Products: Cisco: Prime Infrastructure

Cisco

1 product

Prime Infrastructure

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Infrastructure	Version 1.2.1
Cisco Prime Infrastructure	Version 1.2
Cisco Prime Infrastructure	Version 1.3
Cisco Prime Infrastructure	Version 1.4.1
Cisco Prime Infrastructure	Version 1.4
Cisco Prime Infrastructure	Version 2.0

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140226-pi

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140226-pi

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.