CVE-2019-1821

🗓️ 16 May 2019 01:10:39Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 229 Views🌐 WEB

CVE-2019-1821: Remote code execution in Cisco Prime Infrastructure and EPN Manage

Reporter	Title	Published	Views	Family All 31
0day.today	Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Exploit	19 Jun 201900:00	–	zdt
0day.today	Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal / Remote Code Execution	17 Nov 201900:00	–	zdt
ATTACKERKB	Cisco Prime Infrastructure runrshell Local Privilege Escalation Vulnerability	13 Feb 202000:00	–	attackerkb
ATTACKERKB	Cisco Prime Infrastructure HA HealthMonitor TarArchive Directory Traversal Remote Code Execution	16 May 201900:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary code with root privileges.	31 May 201900:00	–	bdu_fstec
Circl	CVE-2019-1821	16 May 201918:58	–	circl
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities	15 May 201916:00	–	cisco
Tenable Nessus	Cisco Prime Infrastructure Multiple Vulnerabilities (cisco-sa-20190515-pi-rce)	5 Nov 201900:00	–	nessus
Check Point Advisories	Cisco Multiple Products Remote Code Execution (CVE-2019-1821)	20 Jun 201900:00	–	checkpoint_advisories
Cvelist	CVE-2019-1821 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities	16 May 201901:10	–	cvelist

NVD

Node

cisco evolved_programmable_network_managerRange<3.0.1

cisco network_level_serviceMatch3.0(0.0.83b)

cisco prime_infrastructureRange<3.4.1

[
  {
    "product": "Cisco Prime Infrastructure",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "3.4"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-rce
packetstormsecurity	www.packetstormsecurity.com/files/153350/Cisco-Prime-Infrastructure-Health-Monitor-TarArchive-Directory-Traversal.html
securityfocus	www.securityfocus.com/bid/108339

Parameter	Position	Path	Description	CWE
Destination-Dir	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
Compressed-Archive	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
Primary-IP	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
Filecount	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
Filename	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
Filesize	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20
files	request body	/servlet/UploadServlet	UploadServlet is used to upload a tar archive payload which exploits directory traversal to achieve remote code execution.	CWE-20

17 Jun 2026 02:29Current

8.2High risk

Vulners AI Score8.2

CVSS 38.8 - 9.8

CVSS 210

EPSS0.98092

SSVC