VULNERABILITY INTELLIGENCE
CVE-2015-0666
CVSS score7.5 HIGH
EPSS probability40.38%
CISA KEVKnown exploited vulnerability
Published2015-04-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Known Exploited Vulnerability
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
Vendor / product: Cisco / Prime Data Center Network Manager (DCNM)
Description
Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Primary references
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource