CVE-2019-15979

🗓️ 06 Jan 2020 07:45:49Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 92 Views🌐 WEB

Multiple vulnerabilities in Cisco DCNM's REST and SOAP API endpoints can allow remote attackers to inject arbitrary commands

Reporter	Title	Published	Views	Family All 20
zdt	Cisco Data Center Network Manager 11.2 - Remote Code Execution Exploit	6 Feb 202000:00	–	zdt
BDU FSTEC	The vulnerability of the SOAP API interface of the Cisco Data Center Network Manager system allows a attacker to execute arbitrary commands.	29 Jan 202000:00	–	bdu_fstec
Circl	CVE-2019-15979	19 Mar 202415:16	–	circl
Cisco	Cisco Data Center Network Manager Command Injection Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager Command Injection (cisco-sa-20200102-dcnm-comm-inject)	17 Sep 202000:00	–	nessus
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager SOAP API Command Injection Vulnerability	3 Jan 202000:00	–	cnvd
Check Point Advisories	Cisco Data Center Network Manager Command Injection (CVE-2019-15978; CVE-2019-15979)	7 Apr 202000:00	–	checkpoint_advisories
Cvelist	CVE-2019-15979 Cisco Data Center Network Manager Command Injection Vulnerabilities	6 Jan 202007:45	–	cvelist
Exploit DB	Cisco Data Center Network Manager 11.2 - Remote Code Execution	6 Feb 202000:00	–	exploitdb

NVD

Node

cisco data_center_network_managerRange<11.3(1)

[
  {
    "product": "Cisco Data Center Network Manager",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-comm-inject

Parameter	Position	Path	Description	CWE
userName	request body	/fm/fmrest/dbadmin/addUser	REST endpoint used to bypass authentication by adding a global-admin user.	CWE-78
password	request body	/fm/fmrest/dbadmin/addUser	REST endpoint used to bypass authentication by adding a global-admin user.	CWE-78
roleName	request body	/fm/fmrest/dbadmin/addUser	REST endpoint used to bypass authentication by adding a global-admin user.	CWE-78
username	request body	/LogonWSService/LogonWS	SOAP login endpoint that can be used to obtain an authentication token for bypass.	CWE-78
password	request body	/LogonWSService/LogonWS	SOAP login endpoint that can be used to obtain an authentication token for bypass.	CWE-78
expiration	request body	/LogonWSService/LogonWS	SOAP login endpoint that can be used to obtain an authentication token for bypass.	CWE-78
certFile	request body	/SanWSService/SanWS	SOAP endpoint used to trigger loading a remote Java class (Si.class) from an SMB path, enabling remote code execution.	CWE-78
serverIPAddress	request body	/SanWSService/SanWS	SOAP endpoint used to trigger loading a remote Java class (Si.class) from an SMB path, enabling remote code execution.	CWE-78

17 Jun 2026 02:21Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.2

CVSS 29

CVSS 37.2

EPSS0.03304

SSVC

CWE-78