Vulnerabilities fixed in Cisco Data Center Network Manager

🗓️ 21 Jan 2021 00:00:00Reported by NCSCType

Cisco DCN Manager fixes multiple vulnerabilities enabling XSS, data manipulation, auth bypass, circumvention, remote code execution, spoofing, SQL injection, and data access.

Reporter	Title	Published	Views	Family All 168
BDU FSTEC	The vulnerability of the device controller in the Cisco Data Center Network Manager system allows a intruder to compromise the integrity of data.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a malicious actor to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the session verification function of the Cisco Data Center Network Manager (DCNM) allows a attacker to perform an SSRF attack.	8 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Data Center Network Manager system, related to errors in the certificate validation process, allows a perpetrator to compromise the integrity of data.	9 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.	9 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.	9 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the logging subsystem of the Cisco Data Center Network Manager, a system for managing network operations at data centers, allows an intruder to gain unauthorized access to protected information.	9 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to compromise the integrity of the protected information.	9 Feb 202100:00	–	bdu_fstec

21 Jan 2021 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.18.8

CVSS 28.5

EPSS0.01901

SSVC