CVE-2019-1622: Cisco Data Center Network Manager Unauthenticated Remote Code Execution

Exploitation Summary

EIP tracks 2 public exploits for CVE-2019-1622. PoCs published by Metasploit, including Metasploit module exploits/multi/http/cisco_dcnm_upload_2019.

AI-analyzed exploit summary This Metasploit module exploits CVE-2019-1622 (information disclosure) and CVE-2019-1619 (authentication bypass) to achieve unauthenticated remote code execution on Cisco Data Center Network Manager (DCNM) by uploading a WAR file to the Apache Tomcat webapps directory.

Description

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotejava

https://www.exploit-db.com/exploits/47347

View Code ZIP pw:eip

This Metasploit module exploits CVE-2019-1622 (information disclosure) and CVE-2019-1619 (authentication bypass) to achieve unauthenticated remote code execution on Cisco Data Center Network Manager (DCNM) by uploading a WAR file to the Apache Tomcat webapps directory.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Cisco Data Center Network Manager (DCNM) versions 10.4(2) and below, 11.0(1), 11.1(1)

No auth needed

Prerequisites: Network access to the target DCNM instance · Apache Tomcat webapps directory writable

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC EXCELLENT

rubypocjava

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb