Test ID:	1.3.6.1.4.1.25623.1.0.140150
Category:	CISCO
Title:	Cisco Prime Home Web-Based User Interface XML External Entity Vulnerability (cisco-sa-20160921-cph)
Summary:	A vulnerability in the web-based user interface of Cisco Prime; Home could allow an unauthenticated, remote attacker to have read access to part of the; information stored in the affected system.
Description:	Summary: A vulnerability in the web-based user interface of Cisco Prime Home could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. Vulnerability Insight: The vulnerability is due to improper handling of an XML External Entity (XXE) when parsing an XML file. An attacker could exploit this vulnerability by sending a crafted XML file to the affected system. Affected Software/OS: Cisco Prime Home versions 5.2.x prior to 5.2.1.2. Solution: Update to version 5.2.1.2 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6408 BugTraq ID: 93092 http://www.securityfocus.com/bid/93092 Cisco Security Advisory: 20160921 Cisco Prime Home Web-Based User Interface XML External Entity Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160921-cph
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.