CVE-2016-1388: Cisco Network Analysis Module

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(1) allow remote attackers to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21882.

Affected products

• Cisco Network Analysis Module
• Cisco Prime Network Analysis Module Software: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.1.0 only; version 5.1.2 only; version 6.0.2 only; …
• Cisco Prime Virtual Network Analysis Module Software: version 6.0.0 only; version 6.1.0 only; version 6.2.0 only

Published 2016-06-03. Last modified 2026-06-17.