Cisco Prime LAN Management Solution Command Execution Vulnerability

Cisco Prime LAN Management Solution (LMS) Virtual Appliance
contains a vulnerability that could allow an unauthenticated, remote
attacker to execute arbitrary commands with the privileges of the root user. The
vulnerability is due to improper validation of authentication and
authorization commands sent to certain TCP ports. An attacker
could exploit this vulnerability by connecting to the affected system
and sending arbitrary commands.

Cisco has released software updates that address this vulnerability. Workarounds that mitigate these vulnerabilities are available.
This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms”]