CVE-2019-15975

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@cisco.com

Published

2020-01-06

Last modified

2024-11-15

Weaknesses

CWE-798

Affected products

• Cisco Data Center Network Manager (Cisco)
• Data Center Network Manager (Cisco)

References

• http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass