cnvd-2016-09462
Vulnerability from cnvd
Title
Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL注入漏洞
Description
Cisco Prime Infrastructure（PI）和Cisco Evolved Programmable Network Manager（EPNM）都是美国思科（Cisco）公司的产品。PI是一套通过Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）技术进行无线管理的解决方案；EPNM是一套网络管理解决方案。 Cisco Prime Infrastructure and Evolved Programmable Network Manager存在SQL注入漏洞，允许攻击者利用该漏洞在底层数据库危及应用程序，访问或修改数据，或利用潜在的漏洞。
Severity
中
Patch Name
Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL注入漏洞的补丁
Patch Description
Cisco Prime Infrastructure（PI）和Cisco Evolved Programmable Network Manager（EPNM）都是美国思科（Cisco）公司的产品。PI是一套通过Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）技术进行无线管理的解决方案；EPNM是一套网络管理解决方案。 Cisco Prime Infrastructure and Evolved Programmable Network Manager存在SQL注入漏洞，允许攻击者利用该漏洞在底层数据库危及应用程序，访问或修改数据，或利用潜在的漏洞。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-prime

Reference
http://www.securityfocus.com/bid/93522
Impacted products
Name
['Cisco Prime Infrastructure', 'Cisco Evolved Programmable Network Manager']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "93522"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-6443"
    }
  },
  "description": "Cisco Prime Infrastructure\uff08PI\uff09\u548cCisco Evolved Programmable Network Manager\uff08EPNM\uff09\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002PI\u662f\u4e00\u5957\u901a\u8fc7Cisco Prime LAN Management Solution\uff08LMS\uff09\u548cCisco Prime Network Control System\uff08NCS\uff09\u6280\u672f\u8fdb\u884c\u65e0\u7ebf\u7ba1\u7406\u7684\u89e3\u51b3\u65b9\u6848\uff1bEPNM\u662f\u4e00\u5957\u7f51\u7edc\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002 \r\n\r\nCisco Prime Infrastructure and Evolved Programmable Network Manager\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5e95\u5c42\u6570\u636e\u5e93\u5371\u53ca\u5e94\u7528\u7a0b\u5e8f\uff0c\u8bbf\u95ee\u6216\u4fee\u6539\u6570\u636e\uff0c\u6216\u5229\u7528\u6f5c\u5728\u7684\u6f0f\u6d1e\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a \r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-prime",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-09462",
  "openTime": "2016-10-19",
  "patchDescription": "Cisco Prime Infrastructure\uff08PI\uff09\u548cCisco Evolved Programmable Network Manager\uff08EPNM\uff09\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002PI\u662f\u4e00\u5957\u901a\u8fc7Cisco Prime LAN Management Solution\uff08LMS\uff09\u548cCisco Prime Network Control System\uff08NCS\uff09\u6280\u672f\u8fdb\u884c\u65e0\u7ebf\u7ba1\u7406\u7684\u89e3\u51b3\u65b9\u6848\uff1bEPNM\u662f\u4e00\u5957\u7f51\u7edc\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002 \r\n\r\nCisco Prime Infrastructure and Evolved Programmable Network Manager\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u5728\u5e95\u5c42\u6570\u636e\u5e93\u5371\u53ca\u5e94\u7528\u7a0b\u5e8f\uff0c\u8bbf\u95ee\u6216\u4fee\u6539\u6570\u636e\uff0c\u6216\u5229\u7528\u6f5c\u5728\u7684\u6f0f\u6d1e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Prime Infrastructure",
      "Cisco Evolved Programmable Network Manager"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/93522",
  "serverity": "\u4e2d",
  "submitTime": "2016-10-14",
  "title": "Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL\u6ce8\u5165\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.