high7.5Known exploited
CVE-2015-0666
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Impact
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Prime Data Center Network Manager | through 7.0\(2\) Versions 6.3\(1\), 6.3\(2\), 7.0\(1\) |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
- http://www.securitytracker.com/id/1032009
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
- http://www.securitytracker.com/id/1032009
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0666