CVE-2018-0464

HIGH

Cisco Prime Data Center Network Manager - Authenticated Path Traversal and Arbitrary File Write via Management Interface

Title source: llm
STIX 2.1

Description

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system. The vulnerability is due to improper validation of user requests within the management interface. An attacker could exploit this vulnerability by sending malicious requests containing directory traversal character sequences within the management interface. An exploit could allow the attacker to view or create arbitrary files on the targeted system.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041585
Exploit, Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2018-20
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/105159

Scores

CVSS v3 8.1
EPSS 0.0541
EPSS Percentile 91.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-22
Status published
Products (9)
cisco/prime_data_center_network_manager 6.3\(1\)
cisco/prime_data_center_network_manager 6.3\(2\)
cisco/prime_data_center_network_manager 7.0\(1\)
cisco/prime_data_center_network_manager 7.0\(2\)
cisco/prime_data_center_network_manager 7.1\(1\)
cisco/prime_data_center_network_manager 10.0
cisco/prime_data_center_network_manager 10.1
cisco/prime_data_center_network_manager 10.2
cisco/prime_data_center_network_manager 10.3\(1\)
Published Oct 05, 2018
Tracked Since Feb 18, 2026