Vulnerabilities > Cisco > Prime Virtual Network Analysis Module Software > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-06-03 CVE-2016-1388 Command Injection vulnerability in Cisco products
Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.
network
low complexity
cisco CWE-77
critical
9.8