Cisco: >> Prime Lan Management Solution >> 4.2.1 Security Vulnerabilities
Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by leveraging console connectivity, aka Bug ID CSCuw85390.
CVSS Score
7.1
EPSS Score
0.002
Published
2016-03-12
Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute arbitrary commands via a crafted session, aka Bug ID CSCuc79779.
CVSS Score
10.0
EPSS Score
0.042
Published
2013-01-17