PT-2020-5181 · Cisco · Cisco Data Center Network Manager

Published 2020-08-19 · Updated 2020-08-19 · CVE-2020-3540

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager (affected versions not specified)

Description The vulnerability in the web interface of Cisco Data Center Network Manager is related to privilege management errors. It may allow a remote attacker to gain access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

BDU:2020-05797

CVE-2020-3540

Affected Products

Cisco Data Center Network Manager

References · 2

• https://bdu.fstec.ru/vul/2020-05797 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-bypass-auth-mVDR6ygT · Note