Cisco Prime Data Center Network Manager Remote Code Execution Vulnerability

Cisco Prime Data Center Network Manager is a network management application that helps you efficiently implement and manage your virtualized data center. A security vulnerability exists in the Role Based Access Control RBAC feature of Cisco Prime Data Center Network Manager DCNM, which can be...

Default credentials

A vulnerability in Cisco Prime Data Center Network Manager DCNM Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges...

CVE-2017-6639

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the...

CVE-2017-6640: Allocation of Resources Without Limits or Throttling

A vulnerability in Cisco Prime Data Center Network Manager DCNM Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges...

PT-2017-2632

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager DCNM Software releases prior to Release 10.21 for Microsoft Windows, Linux, and Virtual Appliance platforms. Description A vulnerability in the software could allow an unauthenticated, remote attacker to...

PT-2017-2633

Name of the Vulnerable Software and Affected Versions Cisco Prime Data Center Network Manager DCNM versions 10.11 through 10.12 Description A vulnerability in the role-based access control RBAC functionality could allow an unauthenticated, remote attacker to access sensitive information or execut...

CVE-2017-6639: Missing Authorization

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. The vulnerability is due to the...

Cisco Prime Data Center Network Manager Debug Remote Code Execution Vulnerability

A vulnerability in the role-based access control RBAC functionality of Cisco Prime Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system. SPDX-FileCopyrightText: 2017...

Cisco Prime Data Center Network Manager ntpd Multiple Vulnerabilities (uncredentialed check)

According to its self-reported version number, the Cisco Prime Data Center Network Manager DCNM running on the remote host is affected by multiple vulnerabilities : - A security weakness exists due to the configauth function improperly generating default keys when no authentication key is defined...

Cisco Prime Data Center Network Manager Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Cisco Prime Data Center Network Manager < 7.1(1) Directory Traversal Vulnerability

The version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a directory traversal vulnerability in the fmserver servlet due to improper validation of user-supplied input. An unauthenticated, remote attacker, using a crafted file pathname, can read...

Cisco Prime Data Center Network Manager directory traversal

fmserver servlet directory traversal...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241...

CVE-2015-0666

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager DCNM before 7.11 allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

Cisco Data Center Network Manager FileServlet Information Disclosure Vulnerability

This vulnerability allows remote attackers to read arbitrary files, and bypass authentication, on a system with vulnerable installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the fmserver servlet which i...

Cisco Prime Data Center Network Manager 6.x XSS (uncredentialed check)

According to its self-reported version number, the version of Cisco Prime Data Center Network Manager DCNM installed on the remote host is affected by a cross-site scripting vulnerability due to insufficient validation of input parameters by its web server component. Using a specially crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...

CVE-2014-3329: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the web-server component in Cisco Prime Data Center Network Manager DCNM 6.32 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620...