CVE-2019-15977

HIGH

Cisco DCNM - Auth Bypass

Title source: llm

Description

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Exploits (1)

exploitdb WORKING POC

pythonwebappsjava

https://www.exploit-db.com/exploits/48020

View on exploitdb

References (2)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.html

[Vendor Advisory] https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass

Scores

CVSS v3 7.5

EPSS 0.4600

EPSS Percentile 97.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-798

Status published

Affected Products (1)

cisco/data_center_network_manager < 11.3\(1\)

Timeline

Published Jan 06, 2020

Tracked Since Feb 18, 2026