$ cve CVE-2019-1622 JSON

CVE-2019-1622 EXPLOIT

5.3

MEDIUM · CVSS 3.1 · EPSS 78.9% (pctl 100)

Patch early

A public exploit exists.

Description

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download log files and diagnostic information from the affected device.

Scoring

CVSS	5.3 (MEDIUM, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS	78.86% — more likely to be exploited than 100% of all CVEs
Weakness	CWE-284
On CISA KEV	no
Public exploit	yes
Published	2019-06-27
Last modified	2026-06-17

Affected (1)

Vendor	Product
cisco	data center network manager

Public exploits

Source	Title	Date
exploit-db	Cisco Data Center Network Manager - Unauthenticated Remote Code Execution (Metasploit)	2019-09-03

References

→ the Explorer · watch your stack · NVD