CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-15958

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input validation during the initial High Availability (HA) configuration and registration process of an affected device. An attacker could exploit this vulnerability by uploading a malicious file during the HA registration period. A successful exploit could allow the attacker to execute arbitrary code with root-level privileges on the underlying operating system. Note: This vulnerability can only be exploited during the HA registration period. See the Details section for more information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.025

EPSS Ranking 84.4%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 10.0

References

Products affected by CVE-2019-15958

Cisco » Evolved Programmable Network Manager » Version: 1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.1
Cisco » Evolved Programmable Network Manager » Version: 1.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.1.2
Cisco » Evolved Programmable Network Manager » Version: 1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2
Cisco » Evolved Programmable Network Manager » Version: 1.2.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0
Cisco » Evolved Programmable Network Manager » Version: 1.2.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.1.3
Cisco » Evolved Programmable Network Manager » Version: 1.2.200

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.200
Cisco » Evolved Programmable Network Manager » Version: 1.2.300

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.300
Cisco » Evolved Programmable Network Manager » Version: 1.2.400

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.400
Cisco » Evolved Programmable Network Manager » Version: 1.2.500

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.500
Cisco » Evolved Programmable Network Manager » Version: 1.2.600

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.600
Cisco » Evolved Programmable Network Manager » Version: 1.2.700

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.700
Cisco » Evolved Programmable Network Manager » Version: 2.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0
Cisco » Evolved Programmable Network Manager » Version: 2.0(4.0.45b)

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0(4.0.45b)
Cisco » Evolved Programmable Network Manager » Version: 2.0(4.0.45d)

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0(4.0.45d)
Cisco » Evolved Programmable Network Manager » Version: 2.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.1
Cisco » Evolved Programmable Network Manager » Version: 2.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.2
Cisco » Evolved Programmable Network Manager » Version: 2.0.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.3
Cisco » Evolved Programmable Network Manager » Version: 2.0.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.4
Cisco » Evolved Programmable Network Manager » Version: 2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1
Cisco » Evolved Programmable Network Manager » Version: 2.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.1
Cisco » Evolved Programmable Network Manager » Version: 2.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.2
Cisco » Evolved Programmable Network Manager » Version: 2.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3
Cisco » Evolved Programmable Network Manager » Version: 2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2
Cisco » Evolved Programmable Network Manager » Version: 2.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1
Cisco » Evolved Programmable Network Manager » Version: 3.0.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.0
Cisco » Evolved Programmable Network Manager » Version: 3.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.1
Cisco » Prime Infrastructure » Version: N/A

cpe:2.3:a:cisco:prime_infrastructure:-
Cisco » Prime Infrastructure » Version: 1.1

cpe:2.3:a:cisco:prime_infrastructure:1.1
Cisco » Prime Infrastructure » Version: 1.2

cpe:2.3:a:cisco:prime_infrastructure:1.2
Cisco » Prime Infrastructure » Version: 1.2.0

cpe:2.3:a:cisco:prime_infrastructure:1.2.0
Cisco » Prime Infrastructure » Version: 1.2.0.103

cpe:2.3:a:cisco:prime_infrastructure:1.2.0.103
Cisco » Prime Infrastructure » Version: 1.2.1

cpe:2.3:a:cisco:prime_infrastructure:1.2.1
Cisco » Prime Infrastructure » Version: 1.2.12

cpe:2.3:a:cisco:prime_infrastructure:1.2.12
Cisco » Prime Infrastructure » Version: 1.3

cpe:2.3:a:cisco:prime_infrastructure:1.3
Cisco » Prime Infrastructure » Version: 1.3.0

cpe:2.3:a:cisco:prime_infrastructure:1.3.0
Cisco » Prime Infrastructure » Version: 1.3.0.20

cpe:2.3:a:cisco:prime_infrastructure:1.3.0.20
Cisco » Prime Infrastructure » Version: 1.3.0.20-2

cpe:2.3:a:cisco:prime_infrastructure:1.3.0.20-2
Cisco » Prime Infrastructure » Version: 1.4

cpe:2.3:a:cisco:prime_infrastructure:1.4
Cisco » Prime Infrastructure » Version: 1.4.0

cpe:2.3:a:cisco:prime_infrastructure:1.4.0
Cisco » Prime Infrastructure » Version: 1.4.0.45

cpe:2.3:a:cisco:prime_infrastructure:1.4.0.45
Cisco » Prime Infrastructure » Version: 1.4.0.45-2

cpe:2.3:a:cisco:prime_infrastructure:1.4.0.45-2
Cisco » Prime Infrastructure » Version: 1.4.1

cpe:2.3:a:cisco:prime_infrastructure:1.4.1
Cisco » Prime Infrastructure » Version: 1.4.2

cpe:2.3:a:cisco:prime_infrastructure:1.4.2
Cisco » Prime Infrastructure » Version: 2.0

cpe:2.3:a:cisco:prime_infrastructure:2.0
Cisco » Prime Infrastructure » Version: 2.0(4.0.45b)

cpe:2.3:a:cisco:prime_infrastructure:2.0(4.0.45b)
Cisco » Prime Infrastructure » Version: 2.0.0

cpe:2.3:a:cisco:prime_infrastructure:2.0.0
Cisco » Prime Infrastructure » Version: 2.0.0.0.294-2

cpe:2.3:a:cisco:prime_infrastructure:2.0.0.0.294-2
Cisco » Prime Infrastructure » Version: 2.0.0.30

cpe:2.3:a:cisco:prime_infrastructure:2.0.0.30
Cisco » Prime Infrastructure » Version: 2.1

cpe:2.3:a:cisco:prime_infrastructure:2.1
Cisco » Prime Infrastructure » Version: 2.1.0

cpe:2.3:a:cisco:prime_infrastructure:2.1.0
Cisco » Prime Infrastructure » Version: 2.1.1

cpe:2.3:a:cisco:prime_infrastructure:2.1.1
Cisco » Prime Infrastructure » Version: 2.1.2

cpe:2.3:a:cisco:prime_infrastructure:2.1.2
Cisco » Prime Infrastructure » Version: 2.2

cpe:2.3:a:cisco:prime_infrastructure:2.2
Cisco » Prime Infrastructure » Version: 2.2(2)

cpe:2.3:a:cisco:prime_infrastructure:2.2(2)
Cisco » Prime Infrastructure » Version: 2.2(3)

cpe:2.3:a:cisco:prime_infrastructure:2.2(3)
Cisco » Prime Infrastructure » Version: 2.2.0

cpe:2.3:a:cisco:prime_infrastructure:2.2.0
Cisco » Prime Infrastructure » Version: 2.2.1

cpe:2.3:a:cisco:prime_infrastructure:2.2.1
Cisco » Prime Infrastructure » Version: 2.2.2

cpe:2.3:a:cisco:prime_infrastructure:2.2.2
Cisco » Prime Infrastructure » Version: 2.2.3

cpe:2.3:a:cisco:prime_infrastructure:2.2.3
Cisco » Prime Infrastructure » Version: 3.0

cpe:2.3:a:cisco:prime_infrastructure:3.0
Cisco » Prime Infrastructure » Version: 3.0.0

cpe:2.3:a:cisco:prime_infrastructure:3.0.0
Cisco » Prime Infrastructure » Version: 3.0.1

cpe:2.3:a:cisco:prime_infrastructure:3.0.1
Cisco » Prime Infrastructure » Version: 3.0.2

cpe:2.3:a:cisco:prime_infrastructure:3.0.2
Cisco » Prime Infrastructure » Version: 3.0.3

cpe:2.3:a:cisco:prime_infrastructure:3.0.3
Cisco » Prime Infrastructure » Version: 3.0_base

cpe:2.3:a:cisco:prime_infrastructure:3.0_base
Cisco » Prime Infrastructure » Version: 3.1

cpe:2.3:a:cisco:prime_infrastructure:3.1
Cisco » Prime Infrastructure » Version: 3.1(0.0)

cpe:2.3:a:cisco:prime_infrastructure:3.1(0.0)
Cisco » Prime Infrastructure » Version: 3.1(0.128)

cpe:2.3:a:cisco:prime_infrastructure:3.1(0.128)
Cisco » Prime Infrastructure » Version: 3.1(1)

cpe:2.3:a:cisco:prime_infrastructure:3.1(1)
Cisco » Prime Infrastructure » Version: 3.1(4.0)

cpe:2.3:a:cisco:prime_infrastructure:3.1(4.0)
Cisco » Prime Infrastructure » Version: 3.1(5.0)

cpe:2.3:a:cisco:prime_infrastructure:3.1(5.0)
Cisco » Prime Infrastructure » Version: 3.1.0

cpe:2.3:a:cisco:prime_infrastructure:3.1.0
Cisco » Prime Infrastructure » Version: 3.1.1

cpe:2.3:a:cisco:prime_infrastructure:3.1.1
Cisco » Prime Infrastructure » Version: 3.1.3

cpe:2.3:a:cisco:prime_infrastructure:3.1.3
Cisco » Prime Infrastructure » Version: 3.1.4

cpe:2.3:a:cisco:prime_infrastructure:3.1.4
Cisco » Prime Infrastructure » Version: 3.1.5

cpe:2.3:a:cisco:prime_infrastructure:3.1.5
Cisco » Prime Infrastructure » Version: 3.1.6

cpe:2.3:a:cisco:prime_infrastructure:3.1.6
Cisco » Prime Infrastructure » Version: 3.1.7

cpe:2.3:a:cisco:prime_infrastructure:3.1.7
Cisco » Prime Infrastructure » Version: 3.1_base

cpe:2.3:a:cisco:prime_infrastructure:3.1_base
Cisco » Prime Infrastructure » Version: 3.2

cpe:2.3:a:cisco:prime_infrastructure:3.2
Cisco » Prime Infrastructure » Version: 3.2(0.0)

cpe:2.3:a:cisco:prime_infrastructure:3.2(0.0)
Cisco » Prime Infrastructure » Version: 3.2(1.0)

cpe:2.3:a:cisco:prime_infrastructure:3.2(1.0)
Cisco » Prime Infrastructure » Version: 3.2(2.0)

cpe:2.3:a:cisco:prime_infrastructure:3.2(2.0)
Cisco » Prime Infrastructure » Version: 3.2.0

cpe:2.3:a:cisco:prime_infrastructure:3.2.0
Cisco » Prime Infrastructure » Version: 3.2.1

cpe:2.3:a:cisco:prime_infrastructure:3.2.1
Cisco » Prime Infrastructure » Version: 3.2.2

cpe:2.3:a:cisco:prime_infrastructure:3.2.2
Cisco » Prime Infrastructure » Version: 3.2_base

cpe:2.3:a:cisco:prime_infrastructure:3.2_base
Cisco » Prime Infrastructure » Version: 3.3

cpe:2.3:a:cisco:prime_infrastructure:3.3
Cisco » Prime Infrastructure » Version: 3.3(0.0)

cpe:2.3:a:cisco:prime_infrastructure:3.3(0.0)
Cisco » Prime Infrastructure » Version: 3.3.1

cpe:2.3:a:cisco:prime_infrastructure:3.3.1
Cisco » Prime Infrastructure » Version: 3.4

cpe:2.3:a:cisco:prime_infrastructure:3.4
Cisco » Prime Infrastructure » Version: 3.4(0.0)

cpe:2.3:a:cisco:prime_infrastructure:3.4(0.0)
Cisco » Prime Infrastructure » Version: 3.4.1

cpe:2.3:a:cisco:prime_infrastructure:3.4.1
Cisco » Prime Infrastructure » Version: 3.5

cpe:2.3:a:cisco:prime_infrastructure:3.5
Cisco » Prime Infrastructure » Version: 3.5(0.0)

cpe:2.3:a:cisco:prime_infrastructure:3.5(0.0)
Cisco » Prime Infrastructure » Version: 3.6

cpe:2.3:a:cisco:prime_infrastructure:3.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-15958

Products

Pricing

Contact Us