Cisco Prime Data Center Network Manager CVE-2017-6639 Remote Code Execution Vulnerability

Bugtraq ID:	98935
Class:	Input Validation Error
CVE:	CVE-2017-6639
Remote:	Yes
Local:	No
Published:	Jun 07 2017 12:00AM
Updated:	Jun 07 2017 12:00AM
Credit:	Antonius Mulder of Commonwealth Bank of Australia.
Vulnerable:	Cisco Prime Data Center Network Manager 10.1(2) Cisco Prime Data Center Network Manager 10.1(1) Cisco MDS 9500 Series Multilayer Directors 10.1(2) Cisco MDS 9500 Series Multilayer Directors 10.1(1)ST(1) Cisco MDS 9500 Series Multilayer Directors 10.1(1)S5
Not Vulnerable:	Cisco MDS 9500 Series Multilayer Directors 8.2(0)SK(0.37) Cisco MDS 9500 Series Multilayer Directors 8.1(0.115)S0 Cisco MDS 9500 Series Multilayer Directors 10.1(1.148)S0

Cisco Prime Data Center Network Manager CVE-2017-6639 Remote Code Execution Vulnerability

Cisco Prime Data Center Network Manager is prone to a remote code-execution vulnerability because it fails to properly sanitize user-supplied input.

Successful exploit allows an attacker to execute arbitrary code within the context of the user on the affected system.

This issue is being tracked by Cisco Bug ID CSCvd09961.

Cisco Prime Data Center Network Manager CVE-2017-6639 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco Prime Data Center Network Manager CVE-2017-6639 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Prime Data Center Network Manager CVE-2017-6639 Remote Code Execution Vulnerability

References:

• Cisco Homepage (Cisco )
  
• cisco-sa-20170607-dcnm1:Cisco Prime Data Center Network Manager Debug Remote Cod (Cisco)