CVE Feed

    Dashboard / CVE / CVE-2019-15977

    CVE-2019-15977

    Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

    Published:Jan 6, 2020
    Last Modified:Nov 21, 2024
    EPS:Jan 6, 2020
    EPSS Score:0.3089
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Data Center Network Manager

    Exploits

    http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.htmlhttp://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.htmlhttps://www.exploit-db.com/exploits/48020

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Related CVEs

    CVE-2020-3538 (CVSS 4.6) — A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could…
    CVE-2020-3539 (CVSS 6.3) — A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow …
    CVE-2024-20536 (CVSS 8.8) — A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Cont…
    CVE-2024-20449 (CVSS 8.8) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacke…
    CVE-2024-20444 (CVSS 5.5) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager …
    CVE-2024-20432 (CVSS 9.9) — A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an au…
    CVE-2023-44487 (CVSS 7.5) — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …
    CVE-2021-44228 (CVSS 10) — Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features u…
    CVE-2021-1135 (CVSS 4.6) — Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an a…
    CVE-2021-1250 (CVSS 6.5) — Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High