CVE-2016-1408

Published: Jul 2, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488.

Affected (21)

Products: Cisco: Prime Infrastructure, Evolved Programmable Network Manager

Cisco

2 products

Prime Infrastructure

Evolved Programmable Network Manager

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Cisco Prime Infrastructure	Version 1.2.0.103
Cisco Prime Infrastructure	Version 1.2.1
Cisco Prime Infrastructure	Version 1.2
Cisco Prime Infrastructure	Version 1.3.0.20
Cisco Prime Infrastructure	Version 1.3
Cisco Prime Infrastructure	Version 1.4.0.45
Cisco Prime Infrastructure	Version 1.4.1
Cisco Prime Infrastructure	Version 1.4.2
Cisco Prime Infrastructure	Version 1.4
Cisco Prime Infrastructure	Version 2.0
Cisco Prime Infrastructure	Version 2.1.0
Cisco Prime Infrastructure	Version 2.2
Cisco Prime Infrastructure	Version 2.2(2)
Cisco Prime Infrastructure	Version 3.0
Cisco Prime Infrastructure	Version 3.1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Evolved Programmable Network Manager	Version 1.2.0
Cisco Evolved Programmable Network Manager	Version 1.2.1.3
Cisco Evolved Programmable Network Manager	Version 1.2.200
Cisco Evolved Programmable Network Manager	Version 1.2.300
Cisco Evolved Programmable Network Manager	Version 1.2.400
Cisco Evolved Programmable Network Manager	Version 1.2.500