Junglewise Threat Intelligence

CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

CVE-2015-0666 · Severity: critical · CVSS 7.5 · Exploited in the wild · Published 2022-03-25

Vendors: Cisco.

Executive brief

A directory traversal vulnerability in the fmserver servlet of Cisco Prime Data Center Network Manager (DCNM) allows remote, unauthenticated attackers to read arbitrary files via a crafted pathname. This issue is tracked via Cisco Bug ID CSCus00241.

Affected products

  • Cisco Prime Data Center Network Manager (DCNM) before 7.1(1)

Timeline

  • 2015-04-01: advisory: Cisco Security Advisory published
  • 2015-04-03: disclosed: NVD Published Date
  • 2022-03-25: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2022-03-25: exploited: Reported as exploited in the wild per CISA KEV catalog entry