Critical severity9.8NVD Advisory· Published Apr 6, 2016· Updated May 6, 2026
CVE-2016-1291
CVE-2016-1291
Description
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.
Affected products
14- cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:prime_infrastructure:1.2:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:cisco:prime_infrastructure:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.2.0.103:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.3.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.4.0.45:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_infrastructure:2.2:*:*:*:*:*:*:*
- cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcodenvdVendor Advisory
- blogs.securiteam.com/index.php/archives/2727nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1035497nvd
News mentions
0No linked articles in our index yet.