PT-2019-2509 · Cisco · Cisco Data Center Network Manager

Pedro Ribeiro · Published 2019-06-26 · Updated 2020-10-06 · CVE-2019-1620

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager (DCNM) (affected versions not specified)

Description A vulnerability in the web-based management interface of Cisco Data Center Network Manager could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The issue is due to incorrect permission settings in affected DCNM software. An attacker could exploit this by uploading specially crafted data to the affected device, potentially allowing them to write arbitrary files on the filesystem and execute code with root privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-264

CWE-22

Related Identifiers

BDU:2019-02352

CVE-2019-1620

Affected Products

Cisco Data Center Network Manager

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cisco_dcnm_upload_2019.rb · Exploit
• 🔥 https://github.com/pedrib/PoC/blob/master/advisories/Cisco/DCNMPwn.md#1-unsafe-flex-amf-java-object-deserialization · Exploit
• 🔥 https://exploit-db.com/exploits/47347 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1620 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02352 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190626-dcnm-codex · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1620 · Security Note
• http://packetstormsecurity.com/files/153546/Cisco-Data-Center-Network-Manager-11.1-1-Remote-Code-Execution.html · Note
• http://securityfocus.com/bid/108906 · Note
• http://seclists.org/fulldisclosure/2019/Jul/7 · Note
• https://t.me/ckure/2093 · Telegram Post
• https://seclists.org/bugtraq/2019/Jul/11 · Note
• http://packetstormsecurity.com/files/154304/Cisco-Data-Center-Network-Manager-Unauthenticated-Remote-Code-Execution.html · Note