CVE-2018-0258 | BDVDB-2026-100301 Detail

Cisco Prime File Upload Servlet

Description#

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files. This vulnerability affects the following products: Cisco Prime Data Center Network Manager (DCNM) Version 10.0 and later, and Cisco Prime Infrastructure (PI) All versions. Cisco Bug IDs: CSCvf32411, CSCvf81727.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

References#

http://www.securityfocus.com/bid/104074
https://www.tenable.com/security/research/tra-2018-11
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-prime-upload

Exploit#

No public exploit known

History#

Version 12018-05-02Record published in the CVE List.
Version 22024-11-29Most recent update recorded in the CVE List.