CVE-2021-1277: high-severity vulnerability in Cisco Data Center Network Manager
Cisco Data Center Network Manager Certificate Validation Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 0.4%
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when establishing HTTPS requests with the affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Cisco · Cisco Data Center Network ManagerRelated CVEs — Cisco Data Center Network Manager
In the same product, most dangerous first.
CVE-2019-15975CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilitiesEPSS 96.5%CVE-2019-15976CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilitiesEPSS 92.8%CVE-2019-1620CRITICALCisco Data Center Network Manager Arbitrary File Upload and Remote Code Execution VulnerabilityEPSS 83.8%CVE-2019-1619CRITICALCisco Data Center Network Manager Authentication Bypass VulnerabilityEPSS 82.8%CVE-2019-1622MEDIUMCisco Data Center Network Manager Information Disclosure VulnerabilityEPSS 78.9%CVE-2019-15980HIGHCisco Data Center Network Manager Path Traversal VulnerabilitiesEPSS 50.0%