.. / CVE-2019-1821

• RCE
• Nuclei
• Web

Exploit for Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution (CVE-2019-1821)

Description:

Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.

Nuclei Template

View the template here CVE-2019-1821.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-1821.yaml

References: