Cisco Prime LAN Management Solution Virtual Appliance Remote Command Execution Vulnerability

Bugtraq ID:	57221
Class:	Input Validation Error
CVE:	CVE-2012-6392
Remote:	Yes
Local:	No
Published:	Jan 09 2013 12:00AM
Updated:	Jan 09 2013 12:00AM
Credit:	The vendor reported this issue
Vulnerable:
Not Vulnerable:

Cisco Prime LAN Management Solution Virtual Appliance Remote Command Execution Vulnerability

Cisco Prime LAN Management Solution Virtual Appliance is prone to a remote command-execution vulnerability.

Remote attackers can exploit this issue to execute arbitrary commands with the privileges of the root user. This may facilitate a complete compromise of an affected device.

This issue being tracked by Cisco Bug ID CSCuc79779.

Cisco Prime LAN Management Solution Virtual Appliance Remote Command Execution Vulnerability

Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Prime LAN Management Solution Virtual Appliance Remote Command Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

Cisco Prime LAN Management Solution Virtual Appliance Remote Command Execution Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Prime LAN Management Solution Command Execution Vulnerability (Cisco)
  
• Cisco Prime LAN Management Solution Homepage (Cisco)
  
• Release Notes for Cisco Prime LAN Management Solution 4.2 (Cisco)