CVE:CVE-2019-1819
CNNVD:CNNVD-201905-696
Cisco Prime Infrastructure Software和Cisco Evolved Programmable Network Manager都是美国思科（Cisco）公司的产品。Cisco Prime Infrastructure Software是一套通过Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）技术进行无线管理的软件。Cisco Evolved Programmable Network Manager是一套网络管理解决方案。
Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure Software中存在路径遍历漏洞。该漏洞源于网络系统或产品未能正确地过滤资源或文件路径中的特殊元素。攻击者可利用该漏洞访问受限目录之外的位置。
solution:Upgrade cisco evolved_programmable_network_manager to a higher version than 3.0.1,and avoid the version (,3.0.1); Upgrade cisco prime_infrastructure to a higher version than 3.4,and avoid the version (,3.4)