CVE-2019-1821

🗓️ 16 May 2019 01:10:39Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 218 Views🌐 WEB

CVE-2019-1821: Remote code execution in Cisco Prime Infrastructure and EPN Manage

Reporter	Title	Published	Views	Family All 29
0day.today	Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Exploit	19 Jun 201900:00	–	zdt
0day.today	Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal / Remote Code Execution	17 Nov 201900:00	–	zdt
ATTACKERKB	Cisco Prime Infrastructure runrshell Local Privilege Escalation Vulnerability	13 Feb 202000:00	–	attackerkb
ATTACKERKB	Cisco Prime Infrastructure HA HealthMonitor TarArchive Directory Traversal Remote Code Execution	16 May 201900:00	–	attackerkb
Circl	CVE-2019-1821	16 May 201918:58	–	circl
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities	15 May 201916:00	–	cisco
Tenable Nessus	Cisco Prime Infrastructure Multiple Vulnerabilities (cisco-sa-20190515-pi-rce)	5 Nov 201900:00	–	nessus
Check Point Advisories	Cisco Multiple Products Remote Code Execution (CVE-2019-1821)	20 Jun 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-1821 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities	16 May 201901:10	–	cvelist
Exploit DB	Cisco Prime Infrastructure Health Monitor - TarArchive Directory Traversal (Metasploit)	20 Jun 201900:00	–	exploitdb

NVD

Node

cisco evolved_programmable_network_managerRange<3.0.1

cisco network_level_serviceMatch3.0(0.0.83b)

cisco prime_infrastructureRange<3.4.1

[
  {
    "product": "Cisco Prime Infrastructure",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "3.4"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-rce
packetstormsecurity	www.packetstormsecurity.com/files/153350/Cisco-Prime-Infrastructure-Health-Monitor-TarArchive-Directory-Traversal.html
securityfocus	www.securityfocus.com/bid/108339

Parameter	Position	Path	Description	CWE
Destination-Dir	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20
Compressed-Archive	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20
Primary-IP	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20
Filecount	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20
Filename	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20
Filesize	upload data	/servlet/UploadServlet	Authenticated remote code execution via TarArchive directory traversal through UploadServlet during file upload	CWE-20

21 Nov 2024 04:37Current

8.2High risk

Vulners AI Score8.2

CVSS 38.8 - 9.8

CVSS 210

EPSS0.94036

SSVC