CVE:CVE-2019-1825
CNNVD:CNNVD-201905-698
Cisco Prime Infrastructure Software和Cisco Evolved Programmable Network Manager都是美国思科（Cisco）公司的产品。Cisco Prime Infrastructure Software是一套通过Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）技术进行无线管理的软件。Cisco Evolved Programmable Network Manager是一套网络管理解决方案。
Cisco EPN Manager和Cisco PI Software中存在SQL注入漏洞。该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
solution:Upgrade cisco evolved_programmable_network_manager to a higher version than 3.0.1,and avoid the version (,3.0.1); Upgrade cisco network_level_service to a higher version than 3.0(0.0.83b,and avoid the version 3.0(0.0.83b); Upgrade cisco prime_infrastructure to a higher version than 3.4.1,and avoid the version (,3.4.1)