CVE-2016-1391

Published: Jun 4, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889.

Affected (13)

Products: Cisco: Prime Network Analysis Module Software, Prime Virtual Network Analysis Module Software

Cisco

2 products

Prime Network Analysis Module Software

Prime Virtual Network Analysis Module Software

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Network Analysis Module Software	Version 5.0.0
Cisco Prime Network Analysis Module Software	Version 5.0.1
Cisco Prime Network Analysis Module Software	Version 5.0.2
Cisco Prime Network Analysis Module Software	Version 5.1.0
Cisco Prime Network Analysis Module Software	Version 5.1.2
Cisco Prime Network Analysis Module Software	Version 6.0.2
Cisco Prime Network Analysis Module Software	Version 6.1.0
Cisco Prime Network Analysis Module Software	Version 6.1.1
Cisco Prime Network Analysis Module Software	Version 6.2.0
Cisco Prime Virtual Network Analysis Module Software	Version 6.0.0
Cisco Prime Virtual Network Analysis Module Software	Version 6.1.0
Cisco Prime Virtual Network Analysis Module Software	Version 6.2.0
Cisco Prime Virtual Network Analysis Module Software	Version 6.2.1