CVE-2020-3376: Cisco Data Center Network Manager Authentication Bypass Vulnerability
First published: Fri Jul 31 2020(Updated: )
A vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device. The vulnerability is due to a failure in the software to perform proper authentication. An attacker could exploit this vulnerability by browsing to one of the hosted URLs in Cisco DCNM. A successful exploit could allow the attacker to interact with and use certain functions within the Cisco DCNM.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Data Center Network Manager | =11.0\(1\) | |
| Cisco Data Center Network Manager | =11.1\(1\) | |
| Cisco Data Center Network Manager | =11.2\(1\) | |
| Cisco Data Center Network Manager | =11.3\(1\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-3376?
CVE-2020-3376 is a vulnerability in the Device Manager application of Cisco Data Center Network Manager (DCNM) that allows an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device.
How severe is CVE-2020-3376?
CVE-2020-3376 has a severity score of 9.8, which is considered critical.
Which software versions are affected by CVE-2020-3376?
Cisco Data Center Network Manager versions 11.0(1), 11.1(1), 11.2(1), and 11.3(1) are affected by CVE-2020-3376.
How can I fix CVE-2020-3376?
To fix CVE-2020-3376, it is recommended to upgrade to a patched version of Cisco Data Center Network Manager. Refer to the Cisco Security Advisory for specific details.
Where can I find more information about CVE-2020-3376?
You can find more information about CVE-2020-3376 in the Cisco Security Advisory: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-auth-bypass-JkubGpu3
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/references
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- vendor/cisco
- canonical/cisco data center network manager
- version/cisco data center network manager/11.0\(1\)
- version/cisco data center network manager/11.1\(1\)
- version/cisco data center network manager/11.2\(1\)
- version/cisco data center network manager/11.3\(1\)