CVE-2019-15975

PoC —

CVSS 3.1

9.8 critical

EPSS

96%p100

Published

Jan 6, 2020 (Jan 6, 2020)

Modified

Jun 17, 2026

Description

Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Vendors: cisco
Products: data center network manager
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.5%)

In the news4 stories

Expert released PoC exploits for recently disclosed Cisco DCNM flaws

Security AffairsJan 17, 07:43 UTC · Jan 17, 2020Exploit / PoC CVE-2019-15975 CVE-2019-15976 CVE-2019-15977

Cisco Data Center Network Manager flaws fixed, Cisco ASA appliances under attack

Help Net SecurityJan 16, 09:36 UTC · Jan 16, 2020Exploit / PoC in the wildCVE-2019-15975 CVE-2019-15976 CVE-2019-15977+2 CVEs

Threat Source newsletter (Jan. 9, 2019)

Cisco TalosJan 9, 19:00 UTC · Jan 9, 2020Ransomware CVE-2019-17026 CVE-2019-15975 CVE-2019-15976+1 CVEs

Cisco addresses several flaws in its DCNM product

Security AffairsJan 3, 09:08 UTC · Jan 3, 2020Vulnerability CVE-2019-15975 CVE-2019-15976 CVE-2019-15977