HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2015-0666

CVSS 7.5v3.1pub. 2015-04-03upd. 2026-04-22

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Cisco Prime Data Center Network Manager

    APP
    Cisco
    6.3\(1\)6.3\(2\)7.0\(1\)≤ 7.0\(2\)

CISA KEV — detailsi

Vendori
Cisco ↗
Producti
Prime Data Center Network Manager (DCNM)
Added to KEVi
March 25, 2022
Remediation deadline (US Federal)i
April 15, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 15 kwietnia 2022
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2018-0258CRITICAL9.8PL ✓same product

Cisco Prime — path traversal i zdalne wykonanie kodu przez upload pliku

CVE-2017-6640CRITICAL9.8PL ✓same product

Cisco Prime DCNM — domyślne statyczne hasło umożliwia pełny dostęp administracyjny

CVE-2017-6639CRITICAL9.8PL ✓same product

RCE z uprawnieniami root w Cisco Prime DCNM — brak uwierzytelnienia narzędzia debug

CVE-2018-0464HIGH8.1same product

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to...

CVE-2013-5486HIGH10.0same product

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Networ...