CVE-2019-15978

🗓️ 06 Jan 2020 07:45:54Reported by ciscoType

Multiple vulnerabilities in Cisco DCNM REST and SOAP API endpoints allow remote attackers to inject arbitrary commands

Reporter	Title	Published	Views	Family All 17
0day.today	Cisco Data Center Network Manager 11.2.1 - (LanFabricImpl) Command Injection Exploit	6 Feb 202000:00	–	zdt
Circl	CVE-2019-15978	6 Feb 202000:00	–	circl
Cisco	Cisco Data Center Network Manager Command Injection Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager Command Injection (cisco-sa-20200102-dcnm-comm-inject)	17 Sep 202000:00	–	nessus
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager REST API Command Injection Vulnerability	3 Jan 202000:00	–	cnvd
Check Point Advisories	Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)	7 Apr 202000:00	–	checkpoint_advisories
Cvelist	CVE-2019-15978 Cisco Data Center Network Manager Command Injection Vulnerabilities	6 Jan 202007:45	–	cvelist
Exploit DB	Cisco Data Center Network Manager 11.2.1 - 'LanFabricImpl' Command Injection	6 Feb 202000:00	–	exploitdb
exploitpack	Cisco Data Center Network Manager 11.2.1 - LanFabricImpl Command Injection	6 Feb 202000:00	–	exploitpack

NVD

Node

cisco data_center_network_managerRange<11.3(1)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-comm-inject
packetstormsecurity	www.packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html

21 Nov 2024 04:29Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.1945

SSVC

CWE-78