CVE-2019-1622 — Vulnetix

CVE-2019-1622 PUBLISHED CVSS 5.300000190734863 MEDIUM

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.

EPSS 84.53% · 99.3th percentile

Risk Scores

CVSS 3.0

5.300000190734863

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS Score

84.53%

99.3th percentile

Affected Products

Vendor	Product	Versions
Cisco	Cisco Data Center Network Manager	unspecified
cisco	data_center_network_manager	11.0\(1\)

Exploit Intelligence

CIRCL exploited: CVE-2019-1622 (circl-sighting)
CIRCL seen: CVE-2019-1622 (circl-sighting)
CIRCL seen: CVE-2019-1622 (circl-sighting)
CIRCL seen: CVE-2019-1622 (circl-sighting)
20190709 Cisco Data Center Manager multiple vulns; RCE as root (circl)
http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html (circl)
20190626 Cisco Data Center Network Manager Information Disclosure Vulnerability (circl)
http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html (circl)
20190708 Cisco Data Center Manager multiple vulns; RCE as root (circl)
108908 (circl)

…and 6 more exploits

Timeline

Jun 26, 2019 CVE Published
Jul 8, 2019 PoC Published
Sep 2, 2019 PoC Published
Sep 2, 2019 PoC Published
Sep 3, 2019 PoC Published
Apr 14, 2021 EPSS Score
Jul 27, 2021 PoC Published
Aug 24, 2021 EPSS Score
Sep 14, 2021 EPSS Score
Oct 26, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score

References

Open in Interactive Console →