CVE-2015-0666 Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bu...
HighCVSS 7.8
EPSS 40.4%
CISA KEV
added 2022-03-25 · due 2022-04-15
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-25
- Due date (FCEB)
- 2022-04-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco prime data center network manager | <= 7.0\(2\) | No fix listed |
| cisco prime data center network manager | = 6.3(1) | No fix listed |
| cisco prime data center network manager | = 6.3(2) | No fix listed |
| cisco prime data center network manager | = 7.0(1) | No fix listed |
References
- 20150401 Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability vendor-advisory
- 1032009 broken-link vdb-entry
- www.cisa.gov government-resource us-government-resource