Sploitus

Exploit for Cisco Prime Infrastructure Health Monitor tar file directory traversal

saint · 2019-11-25

Exploit Code

MARKDOWN26 lines
## https://sploitus.com/exploit?id=SAINT:F1AAF9FA843D85FC11519D47BCB4428F
Added: 11/25/2019  
CVE: [CVE-2019-1821](<https://vulners.com/cve/CVE-2019-1821>)  
BID: [108339](<http://www.securityfocus.com/bid/108339>)  


### Background

Cisco [Prime Infrastructure](<http://www.cisco.com/c/en/us/products/cloud-systems-management/prime-infrastructure/index.html>) is a management system of wireless and wired networks. 

### Problem

A vulnerability in Cisco Prime Infrastructure Health Monitor allows a remote attacker to execute arbitrary commands by uploading a specially crafted tar file. 

### Resolution

[Upgrade](<https://software.cisco.com/download/home>) to Cisco Prime Infrastructure 3.4.1, 3.5, 3.6, or higher. 

### References

<https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-rce>  


### Platforms

Linux