CVE-2021-1487

CWE-78 — OS Command Injection4 documents4 sources
Severity
8.8HIGH
EPSS
0.7%
top 28.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Evolved Programmable Network ManagerCisco Prime InfrastructureCisco Cisco Prime Infrastructure
Timeline
PublishedMay 22
Latest updateMay 24

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the interface. A successful exploit could allow the attacker to execute arb…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-5frr-j9x3-j3hg: A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an auth↗2022-05-24
▶
CVEList
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability↗2021-05-22
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability↗2021-05-19
▶
CVE-2021-1487 (HIGH CVSS 8.8) | A vulnerability in the web-based ma | cvebase.io