Lucene search

[email protected]CVE-2016-1388

HistoryJun 03, 2016 - 2:01 a.m.

CVE-2016-1388

2016-06-0302:01:00

CWE-77

[email protected]

web.nvd.nist.gov

cisco

prime network analysis module

nam

vnam

cve-2016-1388

remote execution

security vulnerability

http request

cscuy21882

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

52.4%

JSON

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.

CPENameOperatorVersion
cisco:network_analysis_modulecisco network analysis moduleeq*
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq5.0.0
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq5.0.1
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq5.0.2
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq5.1.0
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq5.1.2
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq6.0.2
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq6.1.0
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq6.1.1
cisco:prime_network_analysis_module_softwarecisco prime network analysis module softwareeq6.2.0

CPE	Name	Operator	Version
cisco:network_analysis_module	cisco network analysis module	eq	*
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	5.0.0
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	5.0.1
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	5.0.2
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	5.1.0
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	5.1.2
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	6.0.2
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	6.1.0
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	6.1.1
cisco:prime_network_analysis_module_software	cisco prime network analysis module software	eq	6.2.0

Rows per page:

1-10 of 131

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime

www.securitytracker.com/id/1036013

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.6 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

52.4%

JSON

Related for CVE-2016-1388

cvelist1 cisco1 prion1