CVE-2019-15958

🗓️ 26 Nov 2019 03:11:37Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 87 Views🌐 WEB

CVE-2019-15958: Vulnerability in Cisco Prime Infrastructure and EPN

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to escalate their privileges and execute arbitrary code.	9 Dec 201900:00	–	bdu_fstec
Circl	CVE-2019-15958	28 Feb 202408:36	–	circl
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability	6 Nov 201916:00	–	cisco
Cvelist	CVE-2019-15958 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability	26 Nov 201903:11	–	cvelist
EUVD	EUVD-2019-6855	7 Oct 202500:30	–	euvd
NVD	CVE-2019-15958	26 Nov 201903:15	–	nvd
Prion	Input validation	26 Nov 201903:15	–	prion
Symantec	Multiple Cisco Products CVE-2019-15958 Remote Code Execution Vulnerability	6 Nov 201900:00	–	symantec
Source Incite	SRC-2019-0083 : Cisco Prime Infrastructure Health Monitor HA TarArchive Command Injection Remote Code Execution Vulnerability	1 Feb 201900:00	–	srcincite
Vulnrichment	CVE-2019-15958 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability	26 Nov 201903:11	–	vulnrichment

NVD

Node

cisco prime_infrastructureRange<3.4.2

cisco prime_infrastructureRange3.5–3.5.1

cisco prime_infrastructureMatch3.6

Node

cisco evolved_programmable_network_managerRange<3.0.2

[
  {
    "product": "Cisco Prime Infrastructure",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-pi-epn-codex

Parameter	Position	Path	Description	CWE
Destination-Dir	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
Compressed-Archive	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
Primary-IP	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
Filecount	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
Filename	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
Filesize	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20
files	upload data	servlet/UploadServlet	Unauthenticated remote code execution via tar archive upload in Cisco Prime Infrastructure REST API during HA/configuration; uploaded archive triggers code execution as root.	CWE-20

17 Jun 2026 02:21Current

8.9High risk

Vulners AI Score8.9

CVSS 3.19.8

CVSS 210

CVSS 38.1

EPSS0.03286

SSVC

CWE-20