CVE-2016-1391

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

CVE-2016-1390

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...

Input validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

Design/Logic Flaw

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...

CVE-2016-1390

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...

CVE-2016-1390

Cisco Prime Network Analysis Module (NAM) and Cisco Prime Virtual Network Analysis Module (vNAM) are affected by CVE-2016-1390. The issue arises from insufficient sanitization of CLI input, allowing a local, authenticated attacker to obtain root privileges by crafting input that is processed by t...

CVE-2016-1391

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

CVE-2016-1391

Cisco NAM and vNAM are affected by CVE-2016-1391: an authenticated attacker can trigger remote code execution by sending a crafted HTTP request due to insufficient input sanitization in the web interface. Affected versions include Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-...

CVE-2016-1391: Improper Input Validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.22 allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID...

CVE-2016-1390: Improper Input Validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892...

CVE-2016-1388

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

CVE-2016-1388

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

Input validation

Cisco Prime Network Analysis Module NAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 and Prime Virtual Network Analysis Module vNAM before 6.11 patch.6.1-2-final and 6.2.x before 6.21 allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882...

CVE-2016-1370

Cisco Prime Network Analysis Module NAM before 6.21-b miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service mond process crash and monitoring outage via crafted IPv6 packets, aka Bug ID CSCuy37324...

CVE-2016-1370

Cisco Prime Network Analysis Module (NAM) prior to 6.2(1-b) is affected by CVE-2016-1370 due to improper calculation of IPv6 payload length in the IPv6 decode function. This can be exploited remotely by unauthenticated attackers sending crafted IPv6 packets to cause a denial of service, including...

CVE-2016-1388

CVE-2016-1388 affects Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM). Affected versions allow remote attackers to execute arbitrary OS commands via a crafted HTTP request due to improper input handling. Exploitation status is not detailed in the provide...

Cisco Prime Network Analysis Module Remote Code Execution Vulnerability

The Cisco Prime Network Analysis Module is a network analysis module that is part of the overall Cisco Prime solution. A remote code execution vulnerability exists in the web interface of Cisco Network Analysis Modules. An unauthenticated, remote attacker could use this vulnerability to execute...

Cisco Prime Network Analysis Module Remote Code Execution Vulnerability (CNVD-2016-03804)

The Cisco Prime Network Analysis Module is a network analysis module that is part of the overall Cisco Prime solution. A remote code execution vulnerability exists in the web interface of Cisco NAM/vNAM. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary...