CVE-2016-1391
HighSummary
Cisco Prime Network Analysis Module (NAM) and Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the operating system, posing a serious security threat to the organization.
Recommendation
It is recommended to update to the latest software version to mitigate this vulnerability and to monitor logs for potential exploitation attempts.
Other vulnerabilities in Cisco Prime Network Analysis Module (NAM), Prime Virtual Network Analysis Module (vNAM)
See all- CVE-2016-1390High
Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(1) have a vulnerability that allows local users to gain root access via crafted CLI input.
- CVE-2016-1388Critical
Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM) before version 6.1(1) patch.6.1-2-final and 6.2.x before version 6.2(1) have a vulnerability that allows remote attackers to execute arbitrary OS commands via a crafted HTTP request.
Original NVD description (English source)
Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889.