Vuln: Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

Cisco Data Center Network Manager is prone to multiple security vulnerabilities.

A remote attacker can leverage these issues to upload arbitrary files and execute arbitrary code with the root privileges on the affected device.

This issue is being tracked by Cisco bug ID CSCvo64647.

exploit

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.

solution

Solution:
Updates are available. Please see the references or vendor advisory for more information.

info

Bugtraq ID:	108906
Class:	Design Error
CVE:	CVE-2019-1620
Remote:	Yes
Local:	No
Published:	Jun 26 2019 12:00AM
Updated:	Jun 26 2019 12:00AM
Credit:	Pedro Ribeiro.
Vulnerable:	Cisco Data Center Network Manager 11.1(1) Cisco Data Center Network Manager 11.0(1) Cisco Data Center Network Manager 10.4(2) Cisco Data Center Network Manager 10.4(1) Cisco Data Center Network Manager 10.3(1) Cisco Data Center Network Manager 10.2(1) Cisco Data Center Network Manager 10.1(1) Cisco Data Center Network Manager 10.0(1)
Not Vulnerable:	Cisco Data Center Network Manager 11.2(1)

references

References:

• Cisco Homepage (Cisco )
  
• Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Executio (Cisco)
  

from SecurityFocus Vulnerabilities https://ift.tt/2FxQPmc