CVE-2019-15976 — Vulnetix

CVE-2019-15976 PUBLISHED CVSS 9.800000190734863 CRITICAL

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

EPSS 42.95% · 97.6th percentile

Risk Scores

CVSS 3.0

9.800000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

42.95%

97.6th percentile

Affected Products

Vendor	Product	Versions
cisco	data_center_network_manager	0
Cisco	Cisco Data Center Network Manager	unspecified

Exploit Intelligence

http://packetstormsecurity.com/files/156239/Cisco-Data-Center-Network-Manager-11.2.1-SQL-Injection.html (nist-nvd)
CIRCL exploited: CVE-2019-15976 (circl-sighting)
20200102 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities (circl)
ET EXPLOIT Cisco Data Center Network Manager Authentication Bypass Inbound (CVE-2019-15976) (emergingthreats)
ET EXPLOIT Cisco Data Center Network Manager Authentication Bypass Inbound (CVE-2019-15976) (emergingthreats)
Cisco Data Center Network Manager 11.2.1 - (getVmHostData) SQL Injection Exploit (0day-today)
Cisco Data Center Network Manager 11.2.1 - (getVmHostData) SQL Injection Exploit (0day-today)

Timeline

Jan 2, 2020 CVE Published
Feb 6, 2020 PoC Published
Feb 6, 2020 PoC Published
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Jul 24, 2021 PoC Published
Oct 26, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 28, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 1, 2022 EPSS Score
Sep 4, 2022 EPSS Score

References

Open in Interactive Console →