ID de Prueba:	1.3.6.1.4.1.25623.1.0.105838
Categoría:	CISCO
Título:	Cisco Prime Infrastructure Remote Code Execution Vulnerability (cisco-sa-20160406-remcode) - Active Check
Resumen:	A vulnerability in the web interface of Cisco Prime; Infrastructure could allow an unauthenticated, remote attacker to execute arbitrary code on a; targeted system.
Descripción:	Summary: A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute arbitrary code on a targeted system. Vulnerability Insight: The vulnerability is due to insufficient sanitization of HTTP user-supplied input. An attacker could exploit this vulnerability by sending an HTTP POST with crafted deserialized user data. Vulnerability Impact: An exploit could allow the attacker to execute arbitrary code with root-level privileges on the affected system, which could be used to conduct further attacks. Affected Software/OS: Cisco Prime Infrastructure prior to version 3.0.2 / 2.2.3 Update 4. Solution: Update to version 3.0.2 / 2.2.3 Update 4 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1291 Cisco Security Advisory: 20160406 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode https://blogs.securiteam.com/index.php/archives/2727 http://www.securitytracker.com/id/1035497
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.