CVE-2020-3112

Cisco Data Center Network Manager Privilege Escalation Vulnerability

High · published February 19, 2020

CVSS v3.0
8.8
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this vulnerability by authenticating with a low-privilege account and sending a crafted request to the API. A successful exploit could allow the attacker to interact with the API with administrative privileges.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01452 · 73.2th percentile
Published
2020-02-19T19:16Z
EPSS history
Timeline
  • 19 FEB 19:16Z
    Cisco Data Center Network Manager Privilege Escalation Vulnerability
    cvelistv5