critical10.0Public exploit code
CVE-2013-5486
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Prime Data Center Network Manager - Arbitrary File Upload (Metasploit)2013-12-03 · remote · java · Verified
Impact
Directory traversal vulnerability in processImageSave.jsp in DCNM-SAN Server in Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to write arbitrary files via the chartid parameter, aka Bug IDs CSCue77035 and CSCue77036. NOTE: this can be leveraged to execute arbitrary commands by using the JBoss autodeploy functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Prime Data Center Network Manager | Versions 4.1\(2\), 4.1\(3\), 4.1\(4\), 4.1\(5\), 4.2\(1\), 4.2\(3\) |