$ cve CVE-2019-1619 JSON

CVE-2019-1619 EXPLOIT

9.8

CRITICAL · CVSS 3.1 · EPSS 82.8% (pctl 100)

Patch early

A public exploit exists.

Description

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. The vulnerability is due to improper session management on affected DCNM software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	82.82% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-284
On CISA KEV	no
Public exploit	yes
Published	2019-06-27
Last modified	2026-06-17

Affected (1)

Vendor	Product
cisco	data center network manager

Public exploits

Source	Title	Date
exploit-db	Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)	2019-09-03

References

→ the Explorer · watch your stack · NVD