HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2015-0666

CVSS 7.5v3.1pub. 2015-04-03upd. 2026-04-22

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Cisco Prime Data Center Network Manager

    APP
    Cisco
    6.3\(1\)6.3\(2\)7.0\(1\)≤ 7.0\(2\)

CISA KEV — detailsi

Vendori
Cisco ↗
Producti
Prime Data Center Network Manager (DCNM)
Added to KEVi
March 25, 2022
Remediation deadline (US Federal)i
April 15, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 15 kwietnia 2022
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2018-0258CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote ...

CVE-2017-6640CRITICAL9.8ten sam produkt

A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, rem...

CVE-2017-6639CRITICAL9.8ten sam produkt

A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manag...

CVE-2018-0464HIGH8.1ten sam produkt

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to...

CVE-2013-5486HIGH10.0ten sam produkt

Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Networ...