PT-2020-5220 · Cisco · Cisco Data Center Network Manager

Published 2020-08-19 · Updated 2020-08-28 · CVE-2020-3520

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager (DCNM) Software (affected versions not specified)

Description The issue is related to insufficient protection of confidential information on affected devices, allowing an authenticated, local attacker to obtain sensitive data. This could be achieved by accessing local filesystems and extracting sensitive information from them. A successful exploit could allow the attacker to view sensitive data, potentially using it to elevate their privilege.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-05852

CVE-2020-3520

Affected Products

Cisco Data Center Network Manager

References · 4

• https://bdu.fstec.ru/vul/2020-05852 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-infordisc-DOAXVvFV · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3520 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3520 · Vendor Advisory