CVE-2019-1823: cisco cisco prime infrastructure Improper Input Validation

Vulnerability summary

CVE-2019-1823 is a high (CVSS 9.0) Improper Input Validation vulnerability in cisco cisco prime infrastructure. EPSS estimates a 4.42% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities.

Timeline

1. 16-05-2019
   PublishedVulnerability first disclosed.
2. 20-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.