CVE-2016-1388

Critical

Published: 03/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(1) have a vulnerability that allows remote attackers to execute arbitrary OS commands via a crafted HTTP request.

Risk Assessment

Attackers can remotely take control of the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to upgrade to the latest software version to mitigate this vulnerability.

Original NVD description (English source)

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.