CVE-2012-5417

Cisco Prime Data Center Network Manager < 6.1(1) - Remote Code Execution via JBoss MainDeployer RMI Services

Title source: llm
STIX 2.1

Description

Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properly restrict access to certain JBoss MainDeployer functionality, which allows remote attackers to execute arbitrary commands via JBoss Application Server Remote Method Invocation (RMI) services, aka Bug ID CSCtz44924.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56348
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027712

Scores

EPSS 0.0313
EPSS Percentile 86.5%

Details

CWE
CWE-264
Status published
Products (18)
cisco/prime_data_center_network_manager 4.1\(2\)
cisco/prime_data_center_network_manager 4.1\(3\)
cisco/prime_data_center_network_manager 4.1\(4\)
cisco/prime_data_center_network_manager 4.1\(5\)
cisco/prime_data_center_network_manager 4.2\(1\)
cisco/prime_data_center_network_manager 4.2\(3\)
cisco/prime_data_center_network_manager 5.0\(2\)
cisco/prime_data_center_network_manager 5.0\(3\)
cisco/prime_data_center_network_manager 5.1\(1\)
cisco/prime_data_center_network_manager 5.1\(2\)
... and 8 more
Published Nov 02, 2012
Tracked Since Feb 18, 2026