CVE-2017-6662: A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable...

Security readout for executives and security teams

This issue affects older Cisco network management systems. A logged-in attacker could abuse XML import handling to make the application read or change files and potentially run code. The attacker needs valid credentials and an administrator to import a malicious XML file, reducing likelihood but leaving serious impact if the platform is still in use. Exposure is limited to Cisco Prime Infrastructure releases 1.1 through 3.1.6 and Cisco EPNM releases 1.2, 2.0, and 2.1. Internet-reachable or broadly accessible management interfaces increase risk, especially where many users can authenticate or influence administrators. Treat this as a high-priority legacy management platform risk. The attack path has prerequisites, but successful exploitation could compromise a system used to manage network infrastructure. Prioritize version verification, access restriction, and vendor-guided remediation. Mitigation focus: Confirm whether Cisco PI or EPNM is still deployed and within the affected versions.; Follow Cisco advisory guidance for fixed releases or vendor-approved workarounds.; Restrict web UI access to trusted management networks or VPN users..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.