CWE Code: 287
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Authentication
Summary: a vulnerability in the web-based graphical user interface (gui) of cisco prime home could allow an unauthenticated, remote attacker to bypass authentication. the attacker could be granted full administrator privileges. cisco prime home versions 5.1.1.6 and earlier and 5.2.2.2 and earlier have been confirmed to be vulnerable. cisco prime home versions 6.0 and later are not vulnerable. more information: cscvb71732. known affected releases: 5.0 5.0(1) 5.0(1.1) 5.0(1.2) 5.0(2) 5.15.1(0) 5.1(1) 5.1(1.3) 5.1(1.4) 5.1(1.5) 5.1(1.6) 5.1(2) 5.1(2.1) 5.1(2.3) 5.25.2(0.1) 5.2(1.0) 5.2(1.2) 5.2(2.0) 5.2(2.1) 5.2(2.2).
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-11-03
Last Modified Date: 2016-11-28