What’s Vulnerable › Vulnerabilities

CVE-2016-1291

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-04-06 · updated 2026-06-17
• Weakness: CWE-20

Description

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

Affected products

• Cisco Evolved Programmable Network Manager (EPNM): 1.2.0
• Cisco Prime Infrastructure: 1.2, 1.2.0.103, 1.2.1, 1.3, 1.3.0.20, 1.4 (+6)
• Sun Opensolaris: snv_124

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode
• http://www.securitytracker.com/id/1035497
• https://blogs.securiteam.com/index.php/archives/2727
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode
• http://www.securitytracker.com/id/1035497
• https://blogs.securiteam.com/index.php/archives/2727

Get alerted when CVE-2016-1291 or the next vulnerability affects your stack