SRC-2020-0003 : Cisco Data Center Network Manager SMUJobController getSMUTasks SQL Injection Remote Code Execution Vulnerability

🗓️ 29 Aug 2019 00:00:00Reported by Steven Seeley (mr_me) of Source InciteType

Cisco Data Center Network Manager SMUJobController getSMUTasks SQL Injection Remote Code Execution Vulnerability allows remote attackers to execute arbitrary code on affected installations. Existing authentication can be bypassed, and requests to the rest/smu/getjobs endpoint are vulnerable to SQL injection

Reporter	Title	Published	Views	Family All 115
0day.today	Cisco Data Center Network Manager 11.2.1 - (getVmHostData) SQL Injection Exploit	6 Feb 202000:00	–	zdt
BDU FSTEC	The vulnerability of the REST API interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information, affect data integrity, or execute arbitrary commands on the underlying operating system.	29 Jan 202000:00	–	bdu_fstec
Circl	CVE-2019-15984	6 Feb 202000:00	–	circl
Cisco	Cisco Data Center Network Manager SQL Injection Vulnerabilities	2 Jan 202016:00	–	cisco
Tenable Nessus	Cisco Data Center Network Manager < 11.3(1) Multiple Vulnerabilities	9 Jan 202000:00	–	nessus
CNVD	Cisco Data Center Network Manager REST API SQL Injection Vulnerability	3 Jan 202000:00	–	cnvd
Check Point Advisories	Cisco Data Center Network Manager SQL Injection (CVE-2019-15984)	10 May 202000:00	–	checkpoint_advisories
CVE	CVE-2019-15984	6 Jan 202007:45	–	cve
Cvelist	CVE-2019-15984 Cisco Data Center Network Manager SQL Injection Vulnerabilities	6 Jan 202007:45	–	cvelist
Exploit DB	Cisco Data Center Network Manager 11.2.1 - 'getVmHostData' SQL Injection	6 Feb 202000:00	–	exploitdb