Umbra Wiki cve cve/CVE-2015-0666
Back to wiki

CVE-2015-0666 — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

provenance: imported · CVE: CVE-2015-0666 · CWE: CWE-22

CVE-2015-0666: Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Cisco
Product Prime Data Center Network Manager (DCNM)
Date added 2022-03-25
Due date 2022-04-15
Ransomware campaign use Unknown

Description

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-0666

Weakness behind it

CISA records this vulnerability as an instance of CWE-22. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-0666
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →