CVEvulnerability

CVE-2015-0666

7.5 HIGH Known exploited Published 2015-04-03 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability — Cisco Prime Data Center Network Manager (DCNM)

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

Added to KEV: 2022-03-25
Remediation due: 2022-04-15
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2015-0666

Status: Analyzed
Published: 2015-04-03
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses: CWE-22

Description

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

Affected configurations

• cisco prime data center network manager (<= 7.0\(2\)) • cisco prime data center network manager 6.3\(1\) • cisco prime data center network manager 6.3\(2\) • cisco prime data center network manager 7.0\(1\)

Weakness · CWE (1)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References