CVE-2019-15977CWE-798

Cisco Data Center Network Manager Authentication Bypass Vulnerabilities

Critical · published January 6, 2020

CVSS v3.0
9.8
EPSS
38%
Percentile
98.6
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.38110 · 98.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2020-01-06T07:45Z
EPSS history
Timeline
  • 06 JAN 07:45Z
    Cisco Data Center Network Manager Authentication Bypass Vulnerabilities
    cvelistv5