{"id":"CVE-2019-15975","state":"PUBLISHED","title":"Cisco Data Center Network Manager Authentication Bypass Vulnerabilities","description":"Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.","publishedAt":"2020-01-06T07:40:18.346Z","updatedAt":"2024-11-15T17:52:52.023Z","severity":{"score":9.8,"label":"Critical","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"cisco"},"assigner":"cisco","products":["Cisco Cisco Data Center Network Manager"],"affected":[{"vendor":"Cisco","product":"Cisco Data Center Network Manager","versions":[{"version":"unspecified","status":"affected","lessThan":"n/a","versionType":"custom"}]}],"references":["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass","http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html"],"weaknesses":["CWE-798"],"ingestedAt":"2026-10-29T19:45:33.607Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/15xxx/CVE-2019-15975.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-15975","state":"PUBLISHED","datePublished":"2020-01-06T07:40:18.346Z","dateUpdated":"2024-11-15T17:52:52.023Z","assignerShortName":"cisco","assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateReserved":"2019-09-06T00:00:00.000Z"},"containers":{"cna":{"title":"Cisco Data Center Network Manager Authentication Bypass Vulnerabilities","descriptions":[{"lang":"en","value":"Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."}],"affected":[{"vendor":"Cisco","product":"Cisco Data Center Network Manager","versions":[{"version":"unspecified","status":"affected","lessThan":"n/a","versionType":"custom"}]}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass","name":"20200102 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-798","description":"CWE-798","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"cisco","dateUpdated":"2020-02-06T19:06:08.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633"},"datePublic":"2020-01-02T00:00:00.000Z","exploits":[{"lang":"en","value":"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"source":{"advisory":"cisco-sa-20200102-dcnm-auth-bypass","defect":[["CSCvq85945","CSCvq89859","CSCvq89898"]],"discovery":"INTERNAL"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","DATE_PUBLIC":"2020-01-02T16:00:00-0800","ID":"CVE-2019-15975","STATE":"PUBLIC","TITLE":"Cisco Data Center Network Manager Authentication Bypass Vulnerabilities"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Cisco Data Center Network Manager","version":{"version_data":[{"affected":"<","version_affected":"<","version_value":"n/a"}]}}]},"vendor_name":"Cisco"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."}]},"exploit":[{"lang":"en","value":"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}],"impact":{"cvss":{"baseScore":"9.8","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-798"}]}]},"references":{"reference_data":[{"name":"20200102 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities","refsource":"CISCO","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass"},{"name":"http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html","refsource":"MISC","url":"http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html"}]},"source":{"advisory":"cisco-sa-20200102-dcnm-auth-bypass","defect":[["CSCvq85945","CSCvq89859","CSCvq89898"]],"discovery":"INTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200102-dcnm-auth-bypass","name":"20200102 Cisco Data Center Network Manager Authentication Bypass Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"]},{"url":"http://packetstormsecurity.com/files/156238/Cisco-Data-Center-Network-Manager-11.2-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T01:03:32.459Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-15T16:20:11.812854Z","id":"CVE-2019-15975","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-15T17:52:52.023Z"}}]}}}