PT-2019-2509 · Cisco · Cisco Data Center Network Manager

Pedro Ribeiro · Publicado 2019-06-26 · Atualizado 2020-10-06 · CVE-2019-1620

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager (DCNM) (affected versions not specified)

Description A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The issue is due to incorrect permission settings in affected DCNM software. An attacker could exploit this by uploading specially crafted data to the affected device, potentially allowing them to write arbitrary files on the filesystem and execute code with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-264

CWE-22

Identificadores relacionados

BDU:2019-02352

CVE-2019-1620

Produtos afetados

Cisco Data Center Network Manager

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb · Exploit
• 🔥 https://github.com/pedrib/PoC/blob/master/advisories/Cisco/DCNMPwn.md#1-unsafe-flex-amf-java-object-deserialization · Exploit
• 🔥 https://exploit-db.com/exploits/47347 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1620 · Aviso do Fabricante
• http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html · Nota
• https://bdu.fstec.ru/vul/2019-02352 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-codex · Aviso do Fabricante
• http://securityfocus.com/bid/108906 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1620 · Nota de Segurança
• http://seclists.org/fulldisclosure/2019/Jul/7 · Nota
• https://t.me/ckure/2093 · Publicação no Telegram
• https://seclists.org/bugtraq/2019/Jul/11 · Nota
• http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html · Nota