CVE-2019-1823: Cisco Evolved Programmable Network Manager

High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software improperly validates user-supplied input. An attacker could exploit this vulnerability by uploading a malicious file to the administrative web interface. A successful exploit could allow the attacker to execute code with root-level privileges on the underlying operating system.

Affected products

• Cisco Evolved Programmable Network Manager: before 3.0.1 (fixed in 3.0.1)
• Cisco Network Level Service: version 3.0(0.0.83b) only
• Cisco Prime Infrastructure: before 3.4.1 (fixed in 3.4.1)

Published 2019-05-16. Last modified 2026-06-17.