CVE-2019-15958

CVE-2019-15958 is a critical vulnerability affecting the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM). It allows an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system due to insufficient input validation during the High Availability (HA) configuration and registration process. This vulnerability has a CVSS score of 9.8 (Critical), indicating a network-based attack with low complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. While the vulnerability can only be exploited during the HA registration period, there is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. Despite this, there has been some community discussion and media coverage, suggesting awareness of the flaw.