CVE-2016-1390
HighSummary
Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(1) have a vulnerability that allows local users to gain root access via crafted CLI input.
Risk Assessment
This vulnerability could lead to unauthorized access to the system, posing a serious threat to the security of the organization's data and infrastructure.
Recommendation
It is recommended to update to the latest software version to mitigate this vulnerability and to monitor system access for potential abuse attempts.
Other vulnerabilities in Cisco Prime Network Analysis Module (NAM), Prime Virtual Network Analysis Module (vNAM)
See all- CVE-2016-1391High
Cisco Prime Network Analysis Module (NAM) and Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request.
- CVE-2016-1388Critical
Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(1) have a vulnerability that allows remote attackers to execute arbitrary OS commands via a crafted HTTP request.
Original NVD description (English source)
Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow local users to obtain root access via crafted CLI input, aka Bug ID CSCuy21892.