Skip to content
6.3 Medium

CVE-2020-3377 A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an…

Description

A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to inject arbitrary commands on the affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending crafted arguments to a specific field within the application. A successful exploit could allow the attacker to run commands as the administrator on the DCNM.

Affected products and versions

Product Affected versions Fixed in
Cisco Data Center Network Manager Versions not published

References

Timeline

  1. Published
  2. Last modified
The 74 CVEs of Cisco Data Center Network Manager →
Track this CVE