CVE-2015-4331: Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authe...

Security readout for executives and security teams

This flaw affects old Cisco Prime Infrastructure deployments using AAA authentication. An already authenticated remote user could bypass intended access limits by changing username letter casing. That matters because Prime Infrastructure manages network infrastructure, so excess access could affect operational control. Exposure appears limited to legacy Cisco Prime Infrastructure 1.4(0.45) and earlier systems configured with AAA authentication. The source bundle does not identify affected CPEs or newer products. Treat this as a legacy network-management access risk. It deserves prompt attention where Cisco Prime Infrastructure still manages production networks, especially if administrative access is broadly reachable. Evidence provided does not support emergency active-exploitation handling. Mitigation focus: Check Cisco advisory 40553 for the vendor-fixed release or official workaround.; Prioritize retirement or upgrade of Cisco PI 1.4(0.45) and earlier.; Restrict Prime Infrastructure access to trusted administrative networks..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.