HTTP: Cisco Prime Data Center Network Manager fileUpload Arbitrary File Upload

This signature detects attempts to exploit a known vulnerability in the Cisco DCNM. A successful attack can lead to arbitrary file uploads resulting in Remote Code Execution.

Extended Description

A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device.

Affected Products

Cisco data_center_network_manager

Short Name
HTTP:CISCO:CISCO-DCNM-FUPLD
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Arbitrary CVE-2019-1620 Center Cisco Data File Manager Network Prime Upload bid:108906 fileUpload
Release Date
07/11/2019
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3337
False Positive
Occasionally
Vendors

Cisco

CVSS Score

10.0

Found a potential security threat?