PT-2019-2508 · Cisco · Cisco Data Center Network Manager

Pedro Ribeiro · Published 2019-06-26 · Updated 2020-10-06 · CVE-2019-1619

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager (DCNM) (affected versions not specified)

Description A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The issue is due to improper session management on affected DCNM software. An attacker could exploit this by sending a crafted HTTP request to the affected device, potentially gaining administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Using Hardcoded Credentials

Weakness Enumeration

CWE-284

CWE-798

Related Identifiers

BDU:2019-02351

CVE-2019-1619

Affected Products

Cisco Data Center Network Manager

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_dcnm_download.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47347 · Exploit
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-bypass · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1619 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1619 · Security Note
• https://bdu.fstec.ru/vul/2019-02351 · Security Note
• http://securityfocus.com/bid/108902 · Note
• http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html · Note
• http://seclists.org/fulldisclosure/2019/Jul/7 · Note
• https://seclists.org/bugtraq/2019/Jul/11 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1619 · Note
• http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html · Note