CVE-2016-1442 in Prime Infrastructure

Summary

The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug ID CSCuy96280.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 01/04/2016
• Disclosure: 07/07/2016
• Moderation: VulDB entry created
• Entries: VDB-88817 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 8.8
• EPSS: 0.00696
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1442
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1442
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1442/