Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

Bugtraq ID:	108906
Class:	Design Error
CVE:	CVE-2019-1620
Remote:	Yes
Local:	No
Published:	Jun 26 2019 12:00AM
Updated:	Jun 26 2019 12:00AM
Credit:	Pedro Ribeiro.
Vulnerable:	Cisco Data Center Network Manager 11.1(1) Cisco Data Center Network Manager 11.0(1) Cisco Data Center Network Manager 10.4(2) Cisco Data Center Network Manager 10.4(1) Cisco Data Center Network Manager 10.3(1) Cisco Data Center Network Manager 10.2(1) Cisco Data Center Network Manager 10.1(1) Cisco Data Center Network Manager 10.0(1)
Not Vulnerable:	Cisco Data Center Network Manager 11.2(1)

Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

Cisco Data Center Network Manager is prone to multiple security vulnerabilities.

A remote attacker can leverage these issues to upload arbitrary files and execute arbitrary code with the root privileges on the affected device.

This issue is being tracked by Cisco bug ID CSCvo64647.

Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Data Center Network Manager CVE-2019-1620 Multiple Security Vulnerabilities

References:

• Cisco Homepage (Cisco )
  
• Cisco Data Center Network Manager Arbitrary File Upload and Remote Code Executio (Cisco)