Cisco Releases Security Updates for Data Center Network Manager

Cisco has released a security update to address multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) software.

Threat ID:: CC-3121
Category:
Threat Severity:: Medium
Threat Vector:
Published:: 27 June 2019 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Cisco has released a security update to address multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) software.

Threat details

A remote attacker could exploit some of these vulnerabilities to write arbitrary files on the filesystem and execute code with root privileges on the affected device.

Remediation steps

Type	Step
	Users and administrators are encouraged to review the Cisco Security Advisories below and apply the necessary updates. DCNM Arbitrary File Upload and Remote Code Execution Vulnerability cisco-sa-20190626-dcnm-codex DCNM Authentication Bypass Vulnerability cisco-sa-20190626-dcnm-bypass DCNM Arbitrary File Download Vulnerability cisco-sa-20190626-dcnm-file-dwnld DCNM Information Disclosure Vulnerability cisco-sa-20190626-dcnm-infodiscl

Type

Step

Users and administrators are encouraged to review the Cisco Security Advisories below and apply the necessary updates.

DCNM Arbitrary File Upload and Remote Code Execution Vulnerability cisco-sa-20190626-dcnm-codex
DCNM Authentication Bypass Vulnerability cisco-sa-20190626-dcnm-bypass
DCNM Arbitrary File Download Vulnerability cisco-sa-20190626-dcnm-file-dwnld
DCNM Information Disclosure Vulnerability cisco-sa-20190626-dcnm-infodiscl

Last edited: 14 February 2020 2:45 pm