CVE-2015-0666

cisco prime data center network manager

Published 3 Apr 2015 · updated 17 Jun 2026 · Analyzed

7.5 High · CVSS 3.1, CISA ADP

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 25 Mar 2022, with a remediation deadline of 15 Apr 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka Bug ID CSCus00241.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm · Vendor Advisory
www.securitytracker.com/id/1032009 · Broken Link
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-0666 · US Government Resource