$ cve CVE-2019-1620 JSON

CVE-2019-1620 EXPLOIT

9.8

CRITICAL · CVSS 3.1 · EPSS 83.8% (pctl 100)

Patch early

A public exploit exists.

Description

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	83.78% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	yes
Published	2019-06-27
Last modified	2026-06-17

Affected (1)

Vendor	Product
cisco	data center network manager

Public exploits

Source	Title	Date
exploit-db	Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)	2019-09-03

References

→ the Explorer · watch your stack · NVD