VDB
CVE-2017-12285
CVE-2017-12285
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that it receives and the software does not apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system. Cisco Bug IDs: CSCvf41365.
EPSS 37.19% · 98.5th percentile
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score
37.19%
98.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | prime_network_analysis_module | 6.2\(1b\) |
| n/a | Cisco Network Analysis Module | Cisco Network Analysis Module |
Timeline
- Oct 19, 2017 CVE Published
- Apr 14, 2021 EPSS Score
- Dec 17, 2024 EPSS Score
- Jan 19, 2025 EPSS Score
- Mar 17, 2025 EPSS Score
- Mar 19, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Apr 6, 2025 EPSS Score
- Apr 16, 2025 EPSS Score
- Apr 17, 2025 EPSS Score
- Apr 19, 2025 EPSS Score
- Apr 20, 2025 CVE Updated