Test ID:	1.3.6.1.4.1.25623.1.0.901215
Category:	CISCO
Title:	Cisco Prime LAN Management Solution Remote Command Execution Vulnerability
Summary:	Cisco Prime LAN Management Solution is prone to a remote command execution (RCE) vulnerability.
Description:	Summary: Cisco Prime LAN Management Solution is prone to a remote command execution (RCE) vulnerability. Vulnerability Insight: Flaw is due to improper validation of authentication and authorization commands sent to certain TCP ports. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary command in the context of the root user. Affected Software/OS: Cisco Prime LMS Virtual Appliance Version 4.1 through 4.2.2 on Linux. Solution: Upgrade to Cisco Prime LMS Virtual Appliance to 4.2.3 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6392 Cisco Security Advisory: 20130109 Cisco Prime LAN Management Solution Command Execution Vulnerability http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-lms
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.