Vulnerabilities > Cisco > Prime Data Center Network Manager > Critical

DATE CVE VULNERABILITY TITLE RISK
2018-05-02 CVE-2018-0258 Unrestricted Upload of File with Dangerous Type vulnerability in Cisco products
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files.
network
low complexity
cisco CWE-434
critical
9.8
2017-06-08 CVE-2017-6639 Missing Authorization vulnerability in Cisco Prime Data Center Network Manager 10.1.0/10.1(1)/10.1(2)
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to access sensitive information or execute arbitrary code with root privileges on an affected system.
network
low complexity
cisco CWE-862
critical
9.8
2017-06-08 CVE-2017-6640 Allocation of Resources Without Limits or Throttling vulnerability in Cisco Prime Data Center Network Manager 10.1.0/10.1(1)/10.1(2)
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password.
network
low complexity
cisco CWE-770
critical
9.8