CVE-2019-15977criticalCWE-798

CVE-2019-15977: critical vulnerability in Cisco Data Center Network Manager

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

Published · Updated

60Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 38%
from disclosure to weapon31 days
Published on NVDJan 6
1st PoC+31d
exploitation probability
38%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
In short

Cisco Data Center Network Manager has a flaw that lets hackers bypass login requirements and take full control of the system remotely without needing valid credentials. This is critical because attackers can perform any administrative action they want.

Technical detail

Multiple authentication bypass vulnerabilities in Cisco DCNM (CWE-798: hardcoded credentials or weak authentication) allow unauthenticated remote attackers to gain administrative privileges. The attack vector is network-based with no user interaction required; successful exploitation results in complete system compromise with administrative access.

Summary generated and translated by AI from the official description.
Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Cisco · Cisco Data Center Network Manager
public PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/48020cve_referencepacketstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.htmlunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Cisco Data Center Network Manager

In the same product, most dangerous first.

CVE-2019-15975CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilitiesEPSS 96.5%CVE-2019-15976CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilitiesEPSS 92.8%CVE-2019-1620CRITICALCisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution VulnerabilityEPSS 83.8%CVE-2019-1619CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilityEPSS 82.8%CVE-2019-1622MEDIUMCisco Data Center Network Manager Information Disclosure VulnerabilityEPSS 78.9%CVE-2019-15980HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 50.0%
References
http://packetstormsecurity.com/files/156242/Cisco-Data-Center-Network-Manager-11.2.1-Command-Injection.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass