Intrusion Prevention

Cisco.Prime.Collaboration.Provisioning.Arbitrary.File.Deletion

Description

This indicates an attack attempt against an Arbitrary File Deletion vulnerability in Cisco Prime Collaboration Provisioning.
The vulnerability is caused by the application's failure to sanitize user supplied data. A remote attacker may be able to exploit this to cause a denial of service condition on the affected system.

Affected Products

Cisco Systems Prime Collaboration Provisioning prior to 12.1

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Update to the latest version, available from the website:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170517-pcp3

CVE References

CVE-2017-6635