CVE-2019-15977

HIGH

Cisco Data Center Network Manager < 11.3(1) - Unauthenticated Authentication Bypass via Hard-coded Credentials

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-15977.

AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in Cisco Data Center Network Manager (DCNM) by leaking credentials, bypassing authentication, and executing arbitrary commands to achieve remote code execution. The exploit chains multiple steps, including credential leakage, session establishment, and command injection via the LanFabricImpl createLanFabric endpoint.

Description

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploits (1)

exploitdb WORKING POC

pythonwebappsjava

https://www.exploit-db.com/exploits/48020

View Code ZIP pw:eip

This exploit demonstrates a command injection vulnerability in Cisco Data Center Network Manager (DCNM) by leaking credentials, bypassing authentication, and executing arbitrary commands to achieve remote code execution. The exploit chains multiple steps, including credential leakage, session establishment, and command injection via the LanFabricImpl createLanFabric endpoint.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Cisco Data Center Network Manager (DCNM) 11.2.1

No auth needed

Prerequisites: Network access to the target DCNM instance · Python environment with required libraries (requests, Crypto, etc.)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1078 - Valid Accounts

devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html

Scores

CVSS v3 7.5

EPSS 0.3811

EPSS Percentile 98.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-798

Status published

Products (1)

cisco/data_center_network_manager < 11.3\(1\)

Published Jan 06, 2020

Tracked Since Feb 18, 2026