Critical severity9.8NVD Advisory· Published May 2, 2018· Updated Jun 17, 2026
CVE-2018-0258
CVE-2018-0258
Description
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files. This vulnerability affects the following products: Cisco Prime Data Center Network Manager (DCNM) Version 10.0 and later, and Cisco Prime Infrastructure (PI) All versions. Cisco Bug IDs: CSCvf32411, CSCvf81727.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:cisco:prime_data_center_network_manager:10.0\(1\):*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:cisco:prime_data_center_network_manager:10.0\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:prime_data_center_network_manager:10.2\(1\):*:*:*:*:*:*:*
- (no CPE)range: >=10.0
cpe:2.3:a:cisco:prime_infrastructure:3.3\(0.0\):*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:prime_infrastructure:3.3\(0.0\):*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/104074nvdThird Party AdvisoryVDB Entry
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-prime-uploadnvdVendor Advisory
- www.tenable.com/security/research/tra-2018-11nvdThird Party Advisory
News mentions
0No linked articles in our index yet.