VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 2, 2016· Updated Jun 17, 2026

CVE-2016-1289

CVE-2016-1289

Description

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CSCuy10231.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Cisco Systems, Inc./Evolved Programmable Network Manager2 versions
    cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0:*:*:*:*:*:*:*
    • (no CPE)range: =1.2
  • Cisco Systems, Inc./Prime Infrastructure14 versions
    cpe:2.3:a:cisco:prime_infrastructure:1.2:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:cisco:prime_infrastructure:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.2.0.103:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.3.0.20:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.4.0.45:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:1.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:2.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:prime_infrastructure:2.2\(2\):*:*:*:*:*:*:*
    • (no CPE)range: 1.2 - 3.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.