Sploitus

CVE-2019-1821

12 known exploits for CVE-2019-1821

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.

Affected products
Cisco Evolved Programmable Network Manager, Cisco Prime Infrastructure
Cisco Evolved Programmable Network Manager
< 3.0.1
Cisco Network Level Service
= 3.0\(0.0.83b\)
Cisco Prime Infrastructure
< 3.4.1
CVSS 2.0
10.0 HIGH
CVSS 3.1
9.8 CRITICAL
EPSS
98.1% (100th percentile)
Weakness
CWE-20
NVD status
Modified
Published
2019-05-16
CVE-2019-1821 at NVD
Authoritative description, scoring and affected products

12 known exploits for CVE-2019-1821

Proof-of-concept code and exploit modules indexed by Sploitus

Cisco Prime Infrastructure Health Monitor tar file directory traversal
2019-11-25 SAINT CorporationSAINT
Cisco Prime Infrastructure Health Monitor tar file directory traversal
2019-11-25 SAINT CorporationSAINT
Cisco Prime Infrastructure Health Monitor tar file directory traversal
2019-11-25 SAINT CorporationSAINT
Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal / Remote Code Execution
2019-11-17 mr_meZDTPython
Cisco Prime Infrastructure Health Monitor - TarArchive Directory Traversal (Metasploit)
2019-06-20 MetasploitEXPLOITDBRuby
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Exploit
2019-06-19 metasploitZDTRuby
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal
2019-06-19 mr_mePACKETSTORMRuby
Cisco Prime Infrastructure Health Monitor HA TarArchive - Directory Traversal / Remote Code Execution
2019-05-17 mr_meEXPLOITDBPython
Cisco Prime Infrastructure Health Monitor HA TarArchive - Directory Traversal Remote Code Execution
2019-05-17 mr_meEXPLOITPACKPython
Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability
2019-05-15 Steven Seeley, sinn3r <sinn3r@metasploit.com>METASPLOITRuby
SRC-2019-0034 : Cisco Prime Infrastructure Health Monitor HA TarArchive Directory Traversal Remote Code Execution Vulnerability
2019-02-01 Steven Seeley (mr_me) of Source InciteSRCINCITEPython
SRC-2019-0083 : Cisco Prime Infrastructure Health Monitor HA TarArchive Command Injection Remote Code Execution Vulnerability
2019-02-01 Steven Seeley (mr_me) of Source InciteSRCINCITEPython