CVE-2019-1821: fallo de gravedad alta en Cisco Prime Infrastructure
Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
100Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 8.8epss 98%
de la publicación al arma1 día
Publicada en NVD16 may
1ª PoC+1d
metasploit15 may
VulnCheck+1644d
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Cisco · Cisco Prime InfrastructurePoCs públicas encontradas — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47016exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47686githubgithub.com/k8gege/CiscoExploit★ 144vulncheckvulncheck.com/xdb/423b1aa3640cno verificadovulncheckvulncheck.com/xdb/af7753f2b014no verificadocve_referencepacketstormsecurity.com/files/153350/Cisco-Prime-Infrastructure-Health-Monitor-TarArchive-Directory-Traversal.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Cisco Prime Infrastructure
En el mismo producto, de las más peligrosas a las menos.
CVE-2018-15379—Cisco Prime Infrastructure Arbitrary File Upload and Command Execution VulnerabilityEPSS 86.2%CVE-2019-1818MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1819MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1820MEDIUMCisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 13.6%CVE-2019-1822HIGHCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution VulnerabilitiesEPSS 4.4%CVE-2019-1823HIGHCisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution VulnerabilitiesEPSS 4.4%