CVE Feed

    Dashboard / CVE / CVE-2020-3377

    CVE-2020-3377

    A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted arguments to a specific field within the application. A successful exploit could allow the attacker to run commands as the administrator on the DCNM.

    Published:Jul 31, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 31, 2020
    EPSS Score:0.00659
    CVSS Score:6.3

    Affected Products

    Vendor
    Cisco
    Product
    Data Center Network Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-3538 (CVSS 4.6) — A vulnerability in a certain REST API endpoint of Cisco Data Center Network Manager (DCNM) Software could…
    CVE-2020-3539 (CVSS 6.3) — A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow …
    CVE-2024-20536 (CVSS 8.8) — A vulnerability in a REST API endpoint and web-based management interface of Cisco Nexus Dashboard Fabric Cont…
    CVE-2024-20449 (CVSS 8.8) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an authenticated, remote attacke…
    CVE-2024-20444 (CVSS 5.5) — A vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC), formerly Cisco Data Center Network Manager …
    CVE-2024-20432 (CVSS 9.9) — A vulnerability in the REST API and web UI of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an au…
    CVE-2023-44487 (CVSS 7.5) — The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …
    CVE-2021-44228 (CVSS 10) — Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features u…
    CVE-2021-1135 (CVSS 4.6) — Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an a…
    CVE-2021-1250 (CVSS 6.5) — Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) cou…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High